Read the docs
TI-2013-03811 Aliases CVE-2013-4351GHSA-c6gv-ggmm-8j39

GnuPG 1.4.x, 2.0.x, and 2.1.x treats a key flags subpacket with all bits cleared (no…

Priority LOW 31CWE-310Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
—
Confidentiality · integrity · availability
Partial · Partial · None
Fix status
Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.

Summary

GnuPG 1.4.x, 2.0.x, and 2.1.x treats a key flags subpacket with all bits cleared (no usage permitted) as if it has all bits set (all usage permitted), which might allow remote attackers to bypass intended cryptographic protection mechanisms by leveraging the subkey.

Why it matters now

EPSS 0.02518 84th percentileScored 2026-11-07
Fix Fixed Red Hat: 2 advisories

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 30

CPEVersionsRoleVendor
cpe:2.3:a:gnupg:gnupg:1.4.0:*:*:*:*:*:*:*1.4.0VulnerableGnuPG
cpe:2.3:a:gnupg:gnupg:1.4.2:*:*:*:*:*:*:*1.4.2VulnerableGnuPG
cpe:2.3:a:gnupg:gnupg:1.4.3:*:*:*:*:*:*:*1.4.3VulnerableGnuPG
cpe:2.3:a:gnupg:gnupg:1.4.4:*:*:*:*:*:*:*1.4.4VulnerableGnuPG
cpe:2.3:a:gnupg:gnupg:1.4.5:*:*:*:*:*:*:*1.4.5VulnerableGnuPG
cpe:2.3:a:gnupg:gnupg:1.4.6:*:*:*:*:*:*:*1.4.6VulnerableGnuPG
cpe:2.3:a:gnupg:gnupg:1.4.8:*:*:*:*:*:*:*1.4.8VulnerableGnuPG
cpe:2.3:a:gnupg:gnupg:1.4.10:*:*:*:*:*:*:*1.4.10VulnerableGnuPG
cpe:2.3:a:gnupg:gnupg:1.4.11:*:*:*:*:*:*:*1.4.11VulnerableGnuPG
cpe:2.3:a:gnupg:gnupg:1.4.12:*:*:*:*:*:*:*1.4.12VulnerableGnuPG
  • cpe:2.3:a:gnupg:gnupg:1.4.0:*:*:*:*:*:*:* Versions 1.4.0 Vulnerable ·GnuPG
  • cpe:2.3:a:gnupg:gnupg:1.4.2:*:*:*:*:*:*:* Versions 1.4.2 Vulnerable ·GnuPG
  • cpe:2.3:a:gnupg:gnupg:1.4.3:*:*:*:*:*:*:* Versions 1.4.3 Vulnerable ·GnuPG
  • cpe:2.3:a:gnupg:gnupg:1.4.4:*:*:*:*:*:*:* Versions 1.4.4 Vulnerable ·GnuPG
  • cpe:2.3:a:gnupg:gnupg:1.4.5:*:*:*:*:*:*:* Versions 1.4.5 Vulnerable ·GnuPG
  • cpe:2.3:a:gnupg:gnupg:1.4.6:*:*:*:*:*:*:* Versions 1.4.6 Vulnerable ·GnuPG
  • cpe:2.3:a:gnupg:gnupg:1.4.8:*:*:*:*:*:*:* Versions 1.4.8 Vulnerable ·GnuPG
  • cpe:2.3:a:gnupg:gnupg:1.4.10:*:*:*:*:*:*:* Versions 1.4.10 Vulnerable ·GnuPG
  • cpe:2.3:a:gnupg:gnupg:1.4.11:*:*:*:*:*:*:* Versions 1.4.11 Vulnerable ·GnuPG
  • cpe:2.3:a:gnupg:gnupg:1.4.12:*:*:*:*:*:*:* Versions 1.4.12 Vulnerable ·GnuPG
Show 20 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:gnupg:gnupg:1.4.13:*:*:*:*:*:*:*1.4.13VulnerableGnuPG
cpe:2.3:a:gnupg:gnupg:2.0:*:*:*:*:*:*:*2.0VulnerableGnuPG
cpe:2.3:a:gnupg:gnupg:2.0.1:*:*:*:*:*:*:*2.0.1VulnerableGnuPG
cpe:2.3:a:gnupg:gnupg:2.0.3:*:*:*:*:*:*:*2.0.3VulnerableGnuPG
cpe:2.3:a:gnupg:gnupg:2.0.4:*:*:*:*:*:*:*2.0.4VulnerableGnuPG
cpe:2.3:a:gnupg:gnupg:2.0.5:*:*:*:*:*:*:*2.0.5VulnerableGnuPG
cpe:2.3:a:gnupg:gnupg:2.0.6:*:*:*:*:*:*:*2.0.6VulnerableGnuPG
cpe:2.3:a:gnupg:gnupg:2.0.7:*:*:*:*:*:*:*2.0.7VulnerableGnuPG
cpe:2.3:a:gnupg:gnupg:2.0.8:*:*:*:*:*:*:*2.0.8VulnerableGnuPG
cpe:2.3:a:gnupg:gnupg:2.0.10:*:*:*:*:*:*:*2.0.10VulnerableGnuPG
cpe:2.3:a:gnupg:gnupg:2.0.11:*:*:*:*:*:*:*2.0.11VulnerableGnuPG
cpe:2.3:a:gnupg:gnupg:2.0.12:*:*:*:*:*:*:*2.0.12VulnerableGnuPG
cpe:2.3:a:gnupg:gnupg:2.0.13:*:*:*:*:*:*:*2.0.13VulnerableGnuPG
cpe:2.3:a:gnupg:gnupg:2.0.14:*:*:*:*:*:*:*2.0.14VulnerableGnuPG
cpe:2.3:a:gnupg:gnupg:2.0.15:*:*:*:*:*:*:*2.0.15VulnerableGnuPG
cpe:2.3:a:gnupg:gnupg:2.0.16:*:*:*:*:*:*:*2.0.16VulnerableGnuPG
cpe:2.3:a:gnupg:gnupg:2.0.17:*:*:*:*:*:*:*2.0.17VulnerableGnuPG
cpe:2.3:a:gnupg:gnupg:2.0.18:*:*:*:*:*:*:*2.0.18VulnerableGnuPG
cpe:2.3:a:gnupg:gnupg:2.0.19:*:*:*:*:*:*:*2.0.19VulnerableGnuPG
cpe:2.3:a:gnupg:gnupg:2.1.0:beta1:*:*:*:*:*:*2.1.0 beta1VulnerableGnuPG
  • cpe:2.3:a:gnupg:gnupg:1.4.13:*:*:*:*:*:*:* Versions 1.4.13 Vulnerable ·GnuPG
  • cpe:2.3:a:gnupg:gnupg:2.0:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·GnuPG
  • cpe:2.3:a:gnupg:gnupg:2.0.1:*:*:*:*:*:*:* Versions 2.0.1 Vulnerable ·GnuPG
  • cpe:2.3:a:gnupg:gnupg:2.0.3:*:*:*:*:*:*:* Versions 2.0.3 Vulnerable ·GnuPG
  • cpe:2.3:a:gnupg:gnupg:2.0.4:*:*:*:*:*:*:* Versions 2.0.4 Vulnerable ·GnuPG
  • cpe:2.3:a:gnupg:gnupg:2.0.5:*:*:*:*:*:*:* Versions 2.0.5 Vulnerable ·GnuPG
  • cpe:2.3:a:gnupg:gnupg:2.0.6:*:*:*:*:*:*:* Versions 2.0.6 Vulnerable ·GnuPG
  • cpe:2.3:a:gnupg:gnupg:2.0.7:*:*:*:*:*:*:* Versions 2.0.7 Vulnerable ·GnuPG
  • cpe:2.3:a:gnupg:gnupg:2.0.8:*:*:*:*:*:*:* Versions 2.0.8 Vulnerable ·GnuPG
  • cpe:2.3:a:gnupg:gnupg:2.0.10:*:*:*:*:*:*:* Versions 2.0.10 Vulnerable ·GnuPG
  • cpe:2.3:a:gnupg:gnupg:2.0.11:*:*:*:*:*:*:* Versions 2.0.11 Vulnerable ·GnuPG
  • cpe:2.3:a:gnupg:gnupg:2.0.12:*:*:*:*:*:*:* Versions 2.0.12 Vulnerable ·GnuPG
  • cpe:2.3:a:gnupg:gnupg:2.0.13:*:*:*:*:*:*:* Versions 2.0.13 Vulnerable ·GnuPG
  • cpe:2.3:a:gnupg:gnupg:2.0.14:*:*:*:*:*:*:* Versions 2.0.14 Vulnerable ·GnuPG
  • cpe:2.3:a:gnupg:gnupg:2.0.15:*:*:*:*:*:*:* Versions 2.0.15 Vulnerable ·GnuPG
  • cpe:2.3:a:gnupg:gnupg:2.0.16:*:*:*:*:*:*:* Versions 2.0.16 Vulnerable ·GnuPG
  • cpe:2.3:a:gnupg:gnupg:2.0.17:*:*:*:*:*:*:* Versions 2.0.17 Vulnerable ·GnuPG
  • cpe:2.3:a:gnupg:gnupg:2.0.18:*:*:*:*:*:*:* Versions 2.0.18 Vulnerable ·GnuPG
  • cpe:2.3:a:gnupg:gnupg:2.0.19:*:*:*:*:*:*:* Versions 2.0.19 Vulnerable ·GnuPG
  • cpe:2.3:a:gnupg:gnupg:2.1.0:beta1:*:*:*:*:*:* Versions 2.1.0 beta1 Vulnerable ·GnuPG

Remediation

Red Hat 2 advisories

  • RHSA-2013:1459 Released 2013-10-24 · Red Hat rating Moderate
    gnupg2 security update
    • Red Hat Enterprise Linux (v. 5 server) gnupg2-2.0.10-6.el5_10, gnupg2-2.0.10-6.el5_10.i386, gnupg2-2.0.10-6.el5_10.ia64 +1
    • Red Hat Enterprise Linux Desktop (v. 5 client) gnupg2-2.0.10-6.el5_10, gnupg2-2.0.10-6.el5_10.i386
    • Red Hat Enterprise Linux Desktop (v. 6) gnupg2-2.0.14-6.el6_4
    • Red Hat Enterprise Linux Desktop Optional (v. 6) gnupg2-2.0.14-6.el6_4, gnupg2-smime-2.0.14-6.el6_4
    • Red Hat Enterprise Linux HPC Node (v. 6) gnupg2-2.0.14-6.el6_4
    • Red Hat Enterprise Linux HPC Node Optional (v. 6) gnupg2-2.0.14-6.el6_4, gnupg2-smime-2.0.14-6.el6_4
    • Red Hat Enterprise Linux Server (v. 6) gnupg2-2.0.14-6.el6_4
    • Red Hat Enterprise Linux Server Optional (v. 6) gnupg2-2.0.14-6.el6_4, gnupg2-smime-2.0.14-6.el6_4
    • Red Hat Enterprise Linux Workstation (v. 6) gnupg2-2.0.14-6.el6_4
    • Red Hat Enterprise Linux Workstation Optional (v. 6) gnupg2-2.0.14-6.el6_4, gnupg2-smime-2.0.14-6.el6_4
  • RHSA-2013:1458 Released 2013-10-24 · Red Hat rating Moderate
    gnupg security update
    • Red Hat Enterprise Linux (v. 5 server) gnupg-1.4.5-18.el5_10, gnupg-1.4.5-18.el5_10.i386, gnupg-1.4.5-18.el5_10.ia64 +1
    • Red Hat Enterprise Linux Desktop (v. 5 client) gnupg-1.4.5-18.el5_10, gnupg-1.4.5-18.el5_10.i386

Vendor assessments

Red Hat

Red Hat rating: Low. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux (v. 5 server)Fixed RHSA-2013:1458, RHSA-2013:1459
Red Hat Enterprise Linux Desktop (v. 5 client)Fixed RHSA-2013:1458, RHSA-2013:1459
Red Hat Enterprise Linux Desktop (v. 6)Fixed RHSA-2013:1459
Red Hat Enterprise Linux Desktop Optional (v. 6)Fixed RHSA-2013:1459
Red Hat Enterprise Linux HPC Node (v. 6)Fixed RHSA-2013:1459
Red Hat Enterprise Linux HPC Node Optional (v. 6)Fixed RHSA-2013:1459
Red Hat Enterprise Linux Server (v. 6)Fixed RHSA-2013:1459
Red Hat Enterprise Linux Server Optional (v. 6)Fixed RHSA-2013:1459
Red Hat Enterprise Linux Workstation (v. 6)Fixed RHSA-2013:1459
Red Hat Enterprise Linux Workstation Optional (v. 6)Fixed RHSA-2013:1459
Not affected: 1 product
  • Red Hat Enterprise Linux 7

Timeline

  1. 2026-10-02 Threatist record created from CVE-2013-4351
  2. 2026-10-03 Alias added: GHSA-c6gv-ggmm-8j39

References

Advisory 6

Other 3

  • TI-2022-03243 Integer overflow in libksba CVSS 3.1CRITICAL 9.8
  • TI-2025-42429 Out-of-bounds write in GnuPG CVSS 3.1HIGH 7.8
  • TI-2025-42428 Improper signature verification in GnuPG CVSS 3.1MEDIUM 5.9
  • TI-2008-01464 GnuPG (gpg) 1.4.8 and 2.0.8 allows remote attackers to cause a denial of service (crash)… CVSS 2.0HIGH 9.3
  • TI-2026-20067 Stack-based buffer overflow in GnuPG CVSS 3.1CRITICAL 9.8
  • TI-2018-08614 mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and… CVSS 3.1HIGH 7.5
See all 34 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences