vulnerability

Red Hat: CVE-2014-3591: libgcrypt: use ciphertext blinding for Elgamal decryption (new side-channel attack)

Name: Red Hat: CVE-2014-3591: libgcrypt: use ciphertext blinding for Elgamal decryption (new side-channel attack)
Creator: Red Hat
Published: 2019-11-29T00:00:00.000Z
Keywords: CVE, Red Hat, 2014, 3591, libgcrypt, no-fix-redhat-rpm-package, Severity 2

Try Surface Command

Back to search

Severity

CVSS

(AV:L/AC:M/Au:N/C:P/I:N/A:N)

Published

Nov 29, 2019

Added

Jul 9, 2025

Modified

Jul 9, 2025

Description

Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for Elgamal decryption, which allows physically proximate attackers to obtain the server's private key by determining factors using crafted ciphertext and the fluctuations in the electromagnetic field during multiplication.

Solution

no-fix-redhat-rpm-package

References

NVD-CVE-2014-3591

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report