Total vulnerabilities in the database
GnuPG 1.x before 1.4.16 generates RSA keys using sequences of introductions with certain patterns that introduce a side channel, which allows physically proximate attackers to extract RSA keys via a chosen-ciphertext attack and acoustic cryptanalysis during decryption. NOTE: applications are not typically expected to protect themselves from acoustic side-channel attacks, since this is arguably the responsibility of the physical device. Accordingly, issues of this type would not normally receive a CVE identifier. However, for this issue, the developer has specified a security policy in which GnuPG should offer side-channel resistance, and developer-specified security-policy violations are within the scope of CVE.
Software | From | Fixed in |
---|---|---|
gnupg / gnupg | 1.4.8 | 1.4.8.x |
gnupg / gnupg | 1.2.3 | 1.2.3.x |
gnupg / gnupg | 1.3.3 | 1.3.3.x |
gnupg / gnupg | 1.0.1 | 1.0.1.x |
gnupg / gnupg | 1.3.1 | 1.3.1.x |
gnupg / gnupg | 1.2.6 | 1.2.6.x |
gnupg / gnupg | 1.4.14 | 1.4.14.x |
gnupg / gnupg | 1.3.93 | 1.3.93.x |
gnupg / gnupg | 1.3.2 | 1.3.2.x |
gnupg / gnupg | 1.4.10 | 1.4.10.x |
gnupg / gnupg | 1.4.4 | 1.4.4.x |
gnupg / gnupg | 1.4.0 | 1.4.0.x |
gnupg / gnupg | 1.4.6 | 1.4.6.x |
gnupg / gnupg | 1.2.2 | 1.2.2.x |
gnupg / gnupg | 1.3.4 | 1.3.4.x |
gnupg / gnupg | - | 1.4.15.x |
gnupg / gnupg | 1.4.13 | 1.4.13.x |
gnupg / gnupg | 1.0.0 | 1.0.0.x |
gnupg / gnupg | 1.4 | 1.4.x |
gnupg / gnupg | 1.4.12 | 1.4.12.x |
gnupg / gnupg | 1.3.92 | 1.3.92.x |
gnupg / gnupg | 1.0.7 | 1.0.7.x |
gnupg / gnupg | 1.2.5 | 1.2.5.x |
gnupg / gnupg | 1.0.2 | 1.0.2.x |
gnupg / gnupg | 1.0.4 | 1.0.4.x |
gnupg / gnupg | 1.3.91 | 1.3.91.x |
gnupg / gnupg | 1.2.1-windows | 1.2.1-windows.x |
gnupg / gnupg | 1.0.5 | 1.0.5.x |
gnupg / gnupg | 1.2.0 | 1.2.0.x |
gnupg / gnupg | 1.0.6 | 1.0.6.x |
gnupg / gnupg | 1.0.3 | 1.0.3.x |
gnupg / gnupg | 1.2.7 | 1.2.7.x |
gnupg / gnupg | 1.4.2 | 1.4.2.x |
gnupg / gnupg | 1.4.11 | 1.4.11.x |
gnupg / gnupg | 1.4.3 | 1.4.3.x |
gnupg / gnupg | 1.4.5 | 1.4.5.x |
gnupg / gnupg | 1.2.1 | 1.2.1.x |
gnupg / gnupg | 1.2.4 | 1.2.4.x |
gnupg / gnupg | 1.3.90 | 1.3.90.x |
gnupg / gnupg | 1.3.0 | 1.3.0.x |
gnupg / gnupg | 1.3.6 | 1.3.6.x |