Lucene search
Ubuntu.comUB:CVE-2013-4351HistorySep 13, 2013 - 12:00 a.m.
CVE-2013-4351
2013-09-1300:00:00
ubuntu.com
ubuntu.com
6
5.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
0.004 Low
EPSS
Percentile
74.2%
GnuPG 1.4.x, 2.0.x, and 2.1.x treats a key flags subpacket with all bits
cleared (no usage permitted) as if it has all bits set (all usage
permitted), which might allow remote attackers to bypass intended
cryptographic protection mechanisms by leveraging the subkey.
Bugs
- <https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4351>
- <https://bugs.gentoo.org/show_bug.cgi?id=484836>
- <https://bugzilla.novell.com/show_bug.cgi?id=840510>
- <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=722722 (gnupg)>
- <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=722724 (gnupg2)>
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 10.04 | noarch | gnupg | < 1.4.10-2ubuntu1.4 | UNKNOWN |
| ubuntu | 12.04 | noarch | gnupg | < 1.4.11-3ubuntu2.4 | UNKNOWN |
| ubuntu | 12.10 | noarch | gnupg | < 1.4.11-3ubuntu4.3 | UNKNOWN |
| ubuntu | 13.04 | noarch | gnupg | < 1.4.12-7ubuntu1.2 | UNKNOWN |
| ubuntu | 12.04 | noarch | gnupg2 | < 2.0.17-2ubuntu2.12.04.3 | UNKNOWN |
| ubuntu | 12.10 | noarch | gnupg2 | < 2.0.17-2ubuntu3.2 | UNKNOWN |
| ubuntu | 13.04 | noarch | gnupg2 | < 2.0.19-2ubuntu1.1 | UNKNOWN |
Related
f5
f5
K50413110 : GnuPG vulnerability CVE-2013-4351
2016-02-19 00:00:00
SOL50413110 - GnuPG vulnerability CVE-2013-4351
2016-02-18 00:00:00
nessus
nessus
openSUSE Security Update : gpg2 (openSUSE-SU-2013:1526-1)
2014-06-13 00:00:00
openSUSE Security Update : gpg2 (openSUSE-SU-2013:1494-1)
2014-06-13 00:00:00
F5 Networks BIG-IP : GnuPG vulnerability (K50413110)
2016-02-22 00:00:00
prion
prion
Design/Logic Flaw
2013-10-10 00:55:00
cve
cve
CVE-2013-4351
2013-10-10 00:55:00
openvas
openvas
F5 BIG-IP - GnuPG vulnerability CVE-2013-4351
2016-02-23 00:00:00
Ubuntu: Security Advisory (USN-1987-1)
2022-08-26 00:00:00
Debian: Security Advisory (DSA-2774-1)
2013-10-09 00:00:00
kaspersky
kaspersky
KLA10174 SB vulnerability in GnuPG
2013-10-09 00:00:00
debiancve
debiancve
CVE-2013-4351
2013-10-10 00:55:00
securityvulns
securityvulns
GnuPG security vulnerabilities
2013-10-12 00:00:00
[ MDVSA-2013:247 ] gnupg
2013-10-12 00:00:00
debian
debian
[SECURITY] [DSA 2773-1] gnupg security update
2013-10-10 17:24:34
[SECURITY] [DSA 2774-1] gnupg security update
2013-10-10 17:24:38
fedora
fedora
[SECURITY] Fedora 20 Update: gnupg-1.4.15-1.fc20
2013-10-10 14:48:23
[SECURITY] Fedora 18 Update: gnupg-1.4.15-1.fc18
2013-11-13 02:26:42
[SECURITY] Fedora 19 Update: gnupg-1.4.15-1.fc19
2013-10-12 00:03:06
osv
osv
gnupg2 - several
2013-10-10 00:00:00
gnupg - several
2013-10-10 00:00:00
amazon
amazon
Medium: gnupg2
2013-10-23 15:24:00
Medium: gnupg
2013-10-23 15:23:00
mageia
mageia
Updated gnupg2 packages fix multiple vulnerabilities
2013-10-10 02:34:30
ubuntu
ubuntu
GnuPG vulnerabilities
2013-10-09 00:00:00
oraclelinux
oraclelinux
gnupg2 security update
2013-10-24 00:00:00
gnupg security update
2013-10-24 00:00:00
centos
centos
gnupg2 security update
2013-10-24 16:06:44
gnupg security update
2013-10-25 14:00:34
redhat
redhat
(RHSA-2013:1459) Moderate: gnupg2 security update
2013-10-24 00:00:00
(RHSA-2013:1458) Moderate: gnupg security update
2013-10-24 00:00:00
veracode
veracode
Information Disclosure
2019-05-02 04:56:46
Denial Of Service (DOS)
2019-05-02 04:56:46
gentoo
gentoo
GnuPG, Libgcrypt: Multiple vulnerabilities
2014-02-21 00:00:00
5.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
0.004 Low
EPSS
Percentile
74.2%
Related for UB:CVE-2013-4351