Back to Database
Status published
Medium
CVE-2014-3591
Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement...
Vulnerability Description
Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for Elgamal decryption, which allows physically proximate attackers to obtain the server's private key by determining factors using crafted ciphertext and the fluctuations in the electromagnetic field during multiplication.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-3591
Credits & Attribution
No credits recorded in the NVD database.
References
More from GNU
View All →CVE-2025-8746
GNU libopts __strstr_sse2 memory corruption
Medium
4.8
CVE-2025-8736
GNU cflow Lexer c.c yylex buffer overflow
Medium
4.8
CVE-2025-8735
GNU cflow Lexer c.c yylex null pointer dereference
Medium
4.8
CVE-2025-8225
GNU Binutils DWARF Section dwarf.c process_debug_info memory leak
Medium
4.8
CVE-2025-8224
GNU Binutils BFD Library elf.c bfd_elf_get_str_section null pointer dereference
Medium
4.8
Affected Vendor
Affected Software
Libgcrypt, GnuPG
Vulnerable Versions:
before 1.6.3, before 1.4.19
Timeline
Official Publish:
November 29th, 2019
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.