{"containers": {"cna": {"affected": [{"product": "Libgcrypt", "vendor": "GNU", "versions": [{"status": "affected", "version": "before 1.6.3"}]}, {"product": "GnuPG", "vendor": "GNU", "versions": [{"status": "affected", "version": "before 1.4.19"}]}], "datePublic": "2012-05-23T00:00:00", "descriptions": [{"lang": "en", "value": "Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for Elgamal decryption, which allows physically proximate attackers to obtain the server's private key by determining factors using crafted ciphertext and the fluctuations in the electromagnetic field during multiplication."}], "problemTypes": [{"descriptions": [{"description": "Other", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2019-11-29T21:02:23", "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat"}, "references": [{"tags": ["x_refsource_MISC"], "url": "http://www.cs.tau.ac.il/~tromer/radioexp/"}, {"tags": ["x_refsource_MISC"], "url": "https://lists.gnupg.org/pipermail/gnupg-announce/2015q1/000363.html"}, {"tags": ["x_refsource_MISC"], "url": "https://lists.gnupg.org/pipermail/gnupg-announce/2015q1/000364.html"}, {"tags": ["x_refsource_MISC"], "url": "http://www.debian.org/security/2015/dsa-3184"}, {"tags": ["x_refsource_MISC"], "url": "http://www.debian.org/security/2015/dsa-3185"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "secalert@redhat.com", "ID": "CVE-2014-3591", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Libgcrypt", "version": {"version_data": [{"version_value": "before 1.6.3"}]}}, {"product_name": "GnuPG", "version": {"version_data": [{"version_value": "before 1.4.19"}]}}]}, "vendor_name": "GNU"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for Elgamal decryption, which allows physically proximate attackers to obtain the server's private key by determining factors using crafted ciphertext and the fluctuations in the electromagnetic field during multiplication."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Other"}]}]}, "references": {"reference_data": [{"name": "http://www.cs.tau.ac.il/~tromer/radioexp/", "refsource": "MISC", "url": "http://www.cs.tau.ac.il/~tromer/radioexp/"}, {"name": "https://lists.gnupg.org/pipermail/gnupg-announce/2015q1/000363.html", "refsource": "MISC", "url": "https://lists.gnupg.org/pipermail/gnupg-announce/2015q1/000363.html"}, {"name": "https://lists.gnupg.org/pipermail/gnupg-announce/2015q1/000364.html", "refsource": "MISC", "url": "https://lists.gnupg.org/pipermail/gnupg-announce/2015q1/000364.html"}, {"name": "http://www.debian.org/security/2015/dsa-3184", "refsource": "MISC", "url": "http://www.debian.org/security/2015/dsa-3184"}, {"name": "http://www.debian.org/security/2015/dsa-3185", "refsource": "MISC", "url": "http://www.debian.org/security/2015/dsa-3185"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T10:50:17.627Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.cs.tau.ac.il/~tromer/radioexp/"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://lists.gnupg.org/pipermail/gnupg-announce/2015q1/000363.html"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://lists.gnupg.org/pipermail/gnupg-announce/2015q1/000364.html"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.debian.org/security/2015/dsa-3184"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.debian.org/security/2015/dsa-3185"}]}]}, "cveMetadata": {"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "cveId": "CVE-2014-3591", "datePublished": "2019-11-29T21:02:23", "dateReserved": "2014-05-14T00:00:00", "dateUpdated": "2024-08-06T10:50:17.627Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:gnupg:gnupg:*:*:*:*:*:*:*:*", "matchCriteriaId": "8A7A4C18-6BE6-437E-81AD-C4AD73A78038", "versionEndExcluding": "1.4.19", "vulnerable": true}, {"criteria": "cpe:2.3:a:gnupg:libgcrypt:*:*:*:*:*:*:*:*", "matchCriteriaId": "840D7B26-0812-45F3-803A-B24F7D843364", "versionEndExcluding": "1.6.3", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*", "matchCriteriaId": "16F59A04-14CF-49E2-9973-645477EA09DA", "vulnerable": true}, {"criteria": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*", "matchCriteriaId": "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for Elgamal decryption, which allows physically proximate attackers to obtain the server's private key by determining factors using crafted ciphertext and the fluctuations in the electromagnetic field during multiplication."}, {"lang": "es", "value": "Libgcrypt versiones anteriores a 1.6.3 y GnuPG versiones anteriores a 1.4.19, no implementa un blinding de texto cifrado para el desencriptado de Elgamal, lo que permite a atacantes f\u00edsicamente pr\u00f3ximos obtener la clave privada del servidor determinando factores que utilizan texto cifrado y las fluctuaciones en el campo electromagn\u00e9tico durante la multiplicaci\u00f3n."}], "id": "CVE-2014-3591", "lastModified": "2019-12-05T18:06:49.530", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 1.9, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:L/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 3.4, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "PHYSICAL", "availabilityImpact": "NONE", "baseScore": 4.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 0.5, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2019-11-29T22:15:11.703", "references": [{"source": "secalert@redhat.com", "tags": ["Third Party Advisory"], "url": "http://www.cs.tau.ac.il/~tromer/radioexp/"}, {"source": "secalert@redhat.com", "tags": ["Third Party Advisory"], "url": "http://www.debian.org/security/2015/dsa-3184"}, {"source": "secalert@redhat.com", "tags": ["Third Party Advisory"], "url": "http://www.debian.org/security/2015/dsa-3185"}, {"source": "secalert@redhat.com", "tags": ["Patch", "Release Notes", "Vendor Advisory"], "url": "https://lists.gnupg.org/pipermail/gnupg-announce/2015q1/000363.html"}, {"source": "secalert@redhat.com", "tags": ["Patch", "Vendor Advisory"], "url": "https://lists.gnupg.org/pipermail/gnupg-announce/2015q1/000364.html"}], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-200"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "libgcrypt: use ciphertext blinding for Elgamal decryption (new side-channel attack)", "id": "1198145", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1198145"}, "csaw": false, "cvss": {"cvss_base_score": "1.2", "cvss_scoring_vector": "AV:L/AC:H/Au:N/C:P/I:N/A:N", "status": "draft"}, "details": ["Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for Elgamal decryption, which allows physically proximate attackers to obtain the server's private key by determining factors using crafted ciphertext and the fluctuations in the electromagnetic field during multiplication."], "mitigation": {"lang": "en:us", "value": "In order to successfully exploit this flaw the attacker needs to following conditions:\n1. They need to be very close to the system, in order to record the fluctuations in the electromagnetic waves being emitted by the system.\n2. The attacker needs to send specially-crafted cipher text to the system for decryption.\n3. The attacker needs to record the electromagnetic fluctuations when these cipher texts are being decrypted.\nThe above conditions can be true only when a laptop is being used for decryption in an unsafe external environment. Typical server setups may not be vulnerable."}, "name": "CVE-2014-3591", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:5", "fix_state": "Will not fix", "package_name": "gnupg", "product_name": "Red Hat Enterprise Linux 5"}, {"cpe": "cpe:/o:redhat:enterprise_linux:5", "fix_state": "Will not fix", "package_name": "gnupg2", "product_name": "Red Hat Enterprise Linux 5"}, {"cpe": "cpe:/o:redhat:enterprise_linux:5", "fix_state": "Will not fix", "package_name": "libgcrypt", "product_name": "Red Hat Enterprise Linux 5"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Will not fix", "package_name": "gnupg2", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Will not fix", "package_name": "libgcrypt", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Will not fix", "package_name": "gnupg2", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Will not fix", "package_name": "libgcrypt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/a:redhat:enterprise_linux:7::hypervisor", "fix_state": "Fix deferred", "package_name": "mingw-virt-viewer", "product_name": "Red Hat Enterprise Virtualization 3"}], "public_date": "2015-02-27T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2014-3591\nhttps://nvd.nist.gov/vuln/detail/CVE-2014-3591"], "threat_severity": "Low", "upstream_fix": "GnuPG 1.4.19, libgcrypt 1.6.3"}