CVE-2014-3591

MediumCVSS 4.2/10Last modified Jun 17, 2026

Description

Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for Elgamal decryption, which allows physically proximate attackers to obtain the server's private key by determining factors using crafted ciphertext and the fluctuations in the electromagnetic field during multiplication.

Metrics

CVSS 3.1 4.2/10CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
GNU	Libgcrypt	before 1.6.3
GNU	GnuPG	before 1.4.19

References

http://www.cs.tau.ac.il/~tromer/radioexp/Third Party Advisory
http://www.debian.org/security/2015/dsa-3184Third Party Advisory
http://www.debian.org/security/2015/dsa-3185Third Party Advisory
https://lists.gnupg.org/pipermail/gnupg-announce/2015q1/000363.htmlPatch, Release Notes, Vendor Advisory
https://lists.gnupg.org/pipermail/gnupg-announce/2015q1/000364.htmlPatch, Vendor Advisory
http://www.cs.tau.ac.il/~tromer/radioexp/Third Party Advisory
http://www.debian.org/security/2015/dsa-3184Third Party Advisory
http://www.debian.org/security/2015/dsa-3185Third Party Advisory
https://lists.gnupg.org/pipermail/gnupg-announce/2015q1/000363.htmlPatch, Release Notes, Vendor Advisory
https://lists.gnupg.org/pipermail/gnupg-announce/2015q1/000364.htmlPatch, Vendor Advisory

Timeline

Published: Nov 29, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2014

CVE-2014-35926.1OpenShift Origin: Improperly validated team names could allow stored XSS attacks CVE-2014-35936.0Eval injection vulnerability in luci 0.26.0 allows remote authenticated users with certain permissions to execute arbitrary Python code via CVE-2014-35943.5Cross-site scripting (XSS) vulnerability in the Host Aggregates interface in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 20 CVE-2014-35954.3Cross-site scripting (XSS) vulnerability in spacewalk-java 1.2.39, 1.7.54, and 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.4 th CVE-2014-35965.8The getCN function in Apache Axis 1.4 and earlier does not properly verify that the server hostname matches a domain name in the subject's C CVE-2014-35976.8Multiple buffer overflows in the php_parserr function in ext/standard/dns.c in PHP before 5.4.32 and 5.5.x before 5.5.16 allow remote DNS se CVE-2014-35985.0The Jpeg2KImagePlugin plugin in Pillow before 2.5.3 allows remote attackers to cause a denial of service via a crafted image.CVE-2014-35996.5HornetQ REST is vulnerable to XML External Entity due to insecure configuration of RestEasy CVE-2014-36009.8XML external entity (XXE) vulnerability in Apache ActiveMQ 5.x before 5.10.1 allows remote consumers to have unspecified impact via vectors CVE-2014-36014.3The kvm_iommu_map_pages function in virt/kvm/iommu.c in the Linux kernel through 3.16.1 miscalculates the number of pages during the handlin CVE-2014-36022.1Red Hat OpenShift Enterprise before 2.2 allows local users to obtain IP address and port number information for remote systems by reading /p CVE-2014-36035.9The (1) HttpResource and (2) FileBackedHttpResource implementations in Shibboleth Identity Provider (IdP) before 2.4.1 and OpenSAML Java 2.6