CVE-2013-4351

GnuPG 1.4.x, 2.0.x, and 2.1.x treats a key flags subpacket with all bits cleared (no usage permitted) as if it has all bits set (all usage permitted), which…

published October 10, 2013

CVSS
—
EPSS
3%
Percentile
84.7
In the wild
Unconfirmed
What it is

GnuPG 1.4.x, 2.0.x, and 2.1.x treats a key flags subpacket with all bits cleared (no usage permitted) as if it has all bits set (all usage permitted), which might allow remote attackers to bypass intended cryptographic protection mechanisms by leveraging the subkey.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02518 · 84.7th percentile
Published
2013-10-10T00:00Z
EPSS history
Timeline
  • 10 OCT 00:00Z
    GnuPG 1.4.x, 2.0.x, and 2.1.x treats a key flags subpacket with all bits cleared (no usage permitted) as if it has all bits set (all usage permitted), which…
    cvelistv5