CVE-2013-4576 Information disclosure in n/a

Low 2.1 Published 20 Dec 2013 Updated 6 Aug 2024

Physically proximate attackers can extract RSA keys from GnuPG via acoustic cryptanalysis during decryption, violating the developer's side-channel resistance policy.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: Not needed
Fix: Available

What is CVE-2013-4576?

CVE-2013-4576 is a low-severity vulnerability in n/a, published on 20 Dec 2013. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

GnuPG 1.x before 1.4.16 generates RSA keys using sequences of introductions with certain patterns that introduce a side channel, which allows physically proximate attackers to extract RSA keys via a chosen-ciphertext attack and acoustic cryptanalysis during decryption. NOTE: applications are not typically expected to protect themselves from acoustic side-channel attacks, since this is arguably the responsibility of the physical device. Accordingly, issues of this type would not normally receive a CVE identifier. However, for this issue, the developer has specified a security policy in which GnuPG should offer side-channel resistance, and developer-specified security-policy violations are within the scope of CVE.

Weakness: CWE-255

Which versions are affected by CVE-2013-4576?

It affects 1 product.

Linux distribution packages (4)

`gnupg` Red Hat:enterprise_linux:5::client	All versions	`0:1.4.5-18.el5_10.1`
`gnupg-debuginfo` Red Hat:enterprise_linux:5::client	All versions	`0:1.4.5-18.el5_10.1`
`gnupg` Red Hat:enterprise_linux:5::server	All versions	`0:1.4.5-18.el5_10.1`
`gnupg-debuginfo` Red Hat:enterprise_linux:5::server	All versions	`0:1.4.5-18.el5_10.1`

Products include Gnupg Gnupg.

How do I fix CVE-2013-4576?

Upgrade to a fixed version.

Is CVE-2013-4576 being exploited?

There is no known exploitation of CVE-2013-4576 in the wild and no public exploit code.

Sources

Also known as DSA-2821-1, GHSA-f43f-q929-x2qf, MGASA-2013-0382, RHSA-2014:0016.