CVE-2014-3591

low-risk
Published 2019-11-29

Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for Elgamal decryption, which allows physically proximate attackers to obtain the server's private key by determining factors using crafted ciphertext and the fluctuations in the electromagnetic field during multiplication.

Do I need to act?

-
0.14% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
4
CVSS 4.2/10 Medium
PHYSICAL / HIGH complexity

Affected Products (4)

Libgcrypt

Affected Vendors

Debian Gnupg

References (10)

Third Party Advisory http://www.cs.tau.ac.il/~tromer/radioexp/
Third Party Advisory http://www.debian.org/security/2015/dsa-3184
Third Party Advisory http://www.debian.org/security/2015/dsa-3185
Patch https://lists.gnupg.org/pipermail/gnupg-announce/2015q1/000363.html
Patch https://lists.gnupg.org/pipermail/gnupg-announce/2015q1/000364.html
Third Party Advisory http://www.cs.tau.ac.il/~tromer/radioexp/
Third Party Advisory http://www.debian.org/security/2015/dsa-3184
Third Party Advisory http://www.debian.org/security/2015/dsa-3185
Patch https://lists.gnupg.org/pipermail/gnupg-announce/2015q1/000363.html
Patch https://lists.gnupg.org/pipermail/gnupg-announce/2015q1/000364.html
22
/ 100
low-risk
Severity 11/34 · Low
Exploitability 1/34 · Minimal
Exposure 10/34 · Low