Approved changes feed: RSS · Atom

cpe:2.3:a:gnu:gnupg:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9)
ProductGnupg (bb955b9a-d453-58af-b1a6-7e6ce8d2c5fb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-0837 vulnerable 2026-06-08 05:06:24.004507 Details available
The mpi_powm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timing differences when accessing a pre-computed table during modular exponentiation, related to a "Last-Level Cache Side-Channel Attack."
Published: 2019-11-29T21:10:03.000Z
Updated: 2024-08-06T04:26:11.067Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3591 vulnerable 2026-06-08 05:05:33.639464 Details available
Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for Elgamal decryption, which allows physically proximate attackers to obtain the server's private key by determining factors using crafted ciphertext and the fluctuations in the electromagnetic field during multiplication.
Published: 2019-11-29T21:02:23.000Z
Updated: 2024-08-06T10:50:17.627Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.