vulnerability

Ubuntu: (Multiple Advisories) (CVE-2014-3591): GnuPG vulnerabilities

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
2	(AV:L/AC:M/Au:N/C:P/I:N/A:N)	Nov 29, 2019	Nov 8, 2024	Mar 27, 2026

Severity

CVSS

(AV:L/AC:M/Au:N/C:P/I:N/A:N)

Published

Nov 29, 2019

Added

Nov 8, 2024

Modified

Mar 27, 2026

Description

Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for Elgamal decryption, which allows physically proximate attackers to obtain the server's private key by determining factors using crafted ciphertext and the fluctuations in the electromagnetic field during multiplication.

Solutions

ubuntu-upgrade-gnupgubuntu-upgrade-gnupg2ubuntu-upgrade-libgcrypt11ubuntu-upgrade-libgcrypt20

References

CVE-2014-3591
https://attackerkb.com/topics/CVE-2014-3591
CWE-200
EUVD-EUVD-2014-3565
UBUNTU-USN-2554-1
UBUNTU-USN-2555-1
https://euvd.enisa.europa.eu/vulnerability/EUVD-2014-3565

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today