NetSight
IP …
medium5.8

CVE-2013-4351

GnuPG 1.4.x, 2.0.x, and 2.1.x treats a key flags subpacket with all bits cleared (no usage permitted) as if it has all bits set (all usage permitted), which mi…

Impact

GnuPG 1.4.x, 2.0.x, and 2.1.x treats a key flags subpacket with all bits cleared (no usage permitted) as if it has all bits set (all usage permitted), which might allow remote attackers to bypass intended cryptographic protection mechanisms by leveraging the subkey.

Affected products

VendorProductAffected versions
GnupgGnupg
Versions 1.4.0, 1.4.2, 1.4.3, 1.4.4, 1.4.5, 1.4.6

Weakness classification

CWE-310

References