{"id":"CVE-2014-5270","aliases":["DEBIAN-CVE-2014-5270","DLA-54-1","DLA-93-1","DSA-3024-1","DSA-3073-1","EUVD-2014-5163","GHSA-47gj-9v97-r4c7","MGASA-2014-0365","MGASA-2014-0381","UBUNTU-CVE-2014-5270","USN-2339-2","USN-2554-1"],"status":"published","title":"Libgcrypt before 1.5.4, as used in GnuPG and other products, does not properly perform ciphertext...","description":"Libgcrypt before 1.5.4, as used in GnuPG and other products, does not properly perform ciphertext normalization and ciphertext randomization, which makes it easier for physically proximate attackers to conduct key-extraction attacks by leveraging the ability to collect voltage data from exposed metal, a different vector than CVE-2013-4576.","severity":{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00531,"percentile":0.45194,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-200"],"published":"2014-08-18T00:00:00Z","modified":"2026-10-23T15:47:37Z","fixes":[{"ecosystem":"Debian:12","package":"libgcrypt20","fixed_in":["1.6.0-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libgcrypt20","fixed_in":["1.6.0-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libgcrypt20","fixed_in":["1.6.0-2"],"sources":["osv"]},{"ecosystem":"Debian:6.0","package":"gnupg","fixed_in":["1.4.10-4+squeeze6"],"sources":["osv"]},{"ecosystem":"Debian:6.0","package":"libgcrypt11","fixed_in":["1.4.5-2+squeeze2"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"gnupg","fixed_in":["1.4.12-7+deb7u6"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"libgcrypt11","fixed_in":["1.5.0-5+deb7u2"],"sources":["osv"]},{"ecosystem":"Mageia:3","package":"libgcrypt","fixed_in":["1.5.4-1.mga3"],"sources":["osv"]},{"ecosystem":"Mageia:4","package":"libgcrypt","fixed_in":["1.5.4-1.mga4"],"sources":["osv"]},{"ecosystem":"Mageia:3","package":"gnupg","fixed_in":["1.4.14-1.4.mga3"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"libgcrypt11","fixed_in":["1.5.3-2ubuntu4.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"libgcrypt20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libgcrypt20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libgcrypt20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0-2"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"gnupg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.10-4+squeeze6"}]}],"versions":["1.4.10-4","1.4.10-4+squeeze1","1.4.10-4+squeeze2","1.4.10-4+squeeze3","1.4.10-4+squeeze4","1.4.10-4+squeeze5"]},{"source":"osv","ecosystem":"Debian:6.0","package":"libgcrypt11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.5-2+squeeze2"}]}],"versions":["1.4.5-2","1.4.5-2+squeeze1"]},{"source":"osv","ecosystem":"Debian:7","package":"gnupg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.12-7+deb7u6"}]}],"versions":["1.4.12-7","1.4.12-7+deb7u1","1.4.12-7+deb7u2","1.4.12-7+deb7u3","1.4.12-7+deb7u4","1.4.12-7+deb7u5"]},{"source":"osv","ecosystem":"Debian:7","package":"libgcrypt11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-5+deb7u2"}]}],"versions":["1.5.0-5","1.5.0-5+deb7u1"]},{"source":"osv","ecosystem":"Mageia:3","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-1.mga3"}]}]},{"source":"osv","ecosystem":"Mageia:4","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-1.mga4"}]}]},{"source":"osv","ecosystem":"Mageia:3","package":"gnupg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.14-1.4.mga3"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libgcrypt11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.3-2ubuntu4.1"}]}],"versions":["1.5.0-3ubuntu3","1.5.3-2ubuntu1","1.5.3-2ubuntu4"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libgcrypt11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.3-2ubuntu4.1"}]}],"versions":["1.5.0-3ubuntu3","1.5.3-2ubuntu1","1.5.3-2ubuntu4"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"gnupg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.16-1ubuntu2.3"}]}],"versions":["1.4.14-1ubuntu2","1.4.15-1.1ubuntu1","1.4.15-1.1ubuntu2","1.4.15-2ubuntu1","1.4.16-1ubuntu1","1.4.16-1ubuntu2","1.4.16-1ubuntu2.1"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.22-3ubuntu1.3"}]}],"versions":["2.0.20-1ubuntu3","2.0.22-1ubuntu1","2.0.22-3ubuntu1","2.0.22-3ubuntu1.1"],"bundled":5}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"gnupg","product":"libgcrypt"}],"references":[{"url":"http://lists.gnupg.org/pipermail/gnupg-announce/2014q3/000352.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Patch","Vendor Advisory","advisory","fix","web","report"]},{"url":"http://www.debian.org/security/2014/dsa-3073","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"http://openwall.com/lists/oss-security/2014/08/16/2","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","article","web"]},{"url":"http://www.cs.tau.ac.il/~tromer/handsoff/","tags":["x_refsource_MISC","x_transferred","Technical Description","article"]},{"url":"http://www.debian.org/security/2014/dsa-3024","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-5270"},{"url":"http://www.cs.tau.ac.il/~tromer/handsoff"},{"url":"https://github.com/advisories/GHSA-47gj-9v97-r4c7"},{"url":"https://security-tracker.debian.org/tracker/CVE-2014-5270","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2014-0365.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=13904","tags":["report"]},{"url":"http://lists.gnupg.org/pipermail/gnupg-announce/2014q3/000351.html","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2014-0381.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=14050","tags":["report"]},{"url":"http://www.ubuntu.com/usn/usn-2339-1/","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2014-5270","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2339-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2339-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-5270","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2554-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-3591","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-0837","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-1606","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-1607","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2014-5270","description":"Libgcrypt before 1.5.4, as used in GnuPG and other products, does not properly perform ciphertext normalization and ciphertext randomization, which makes it easier for physically proximate attackers to conduct key-extraction attacks by leveraging the ability to collect voltage data from exposed metal, a different vector than CVE-2013-4576.","status":"published","published":"2014-10-10T01:00:00Z","modified":"2024-08-06T11:41:47.78Z","updated_at":"2026-11-02T14:33:42.219637Z"}],"euvd":[{"id":"EUVD-2014-5163","description":"Libgcrypt before 1.5.4, as used in GnuPG and other products, does not properly perform ciphertext normalization and ciphertext randomization, which makes it easier for physically proximate attackers to conduct key-extraction attacks by leveraging the ability to collect voltage data from exposed metal, a different vector than CVE-2013-4576.","status":"published","published":"2014-10-10T01:00:00Z","modified":"2024-08-06T11:41:47Z","updated_at":"2026-11-03T01:57:03.789124Z"}],"ghsa":[{"id":"GHSA-47gj-9v97-r4c7","title":"Libgcrypt before 1.5.4, as used in GnuPG and other products, does not properly perform ciphertext...","description":"Libgcrypt before 1.5.4, as used in GnuPG and other products, does not properly perform ciphertext normalization and ciphertext randomization, which makes it easier for physically proximate attackers to conduct key-extraction attacks by leveraging the ability to collect voltage data from exposed metal, a different vector than CVE-2013-4576.","status":"published","published":"2022-05-17T00:28:35Z","modified":"2025-04-12T12:40:31Z","cwes":["CWE-200"],"updated_at":"2026-11-02T15:01:18.899916Z"}],"nvd":[{"id":"CVE-2014-5270","description":"Libgcrypt before 1.5.4, as used in GnuPG and other products, does not properly perform ciphertext normalization and ciphertext randomization, which makes it easier for physically proximate attackers to conduct key-extraction attacks by leveraging the ability to collect voltage data from exposed metal, a different vector than CVE-2013-4576.","status":"published","published":"2014-10-10T01:55:10.383Z","modified":"2026-06-17T00:11:18.607Z","cvss":[{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:02:56.266125Z"}],"osv":[{"id":"CVE-2014-5270","description":"Libgcrypt before 1.5.4, as used in GnuPG and other products, does not properly perform ciphertext normalization and ciphertext randomization, which makes it easier for physically proximate attackers to conduct key-extraction attacks by leveraging the ability to collect voltage data from exposed metal, a different vector than CVE-2013-4576.","status":"published","published":"2014-10-10T01:55:10Z","modified":"2026-04-16T06:23:49.130619831Z","updated_at":"2026-11-02T15:43:59.654289Z"},{"id":"DEBIAN-CVE-2014-5270","description":"Libgcrypt before 1.5.4, as used in GnuPG and other products, does not properly perform ciphertext normalization and ciphertext randomization, which makes it easier for physically proximate attackers to conduct key-extraction attacks by leveraging the ability to collect voltage data from exposed metal, a different vector than CVE-2013-4576.","status":"published","published":"2014-10-10T01:55:10.383Z","modified":"2026-10-23T15:47:37.660178485Z","updated_at":"2026-11-02T15:45:26.134753Z"},{"id":"DLA-54-1","title":"gnupg - security-update","status":"published","published":"2014-09-14T00:00:00Z","modified":"2026-03-09T02:10:09.492847Z","updated_at":"2026-11-02T15:46:13.207219Z"},{"id":"DLA-93-1","title":"libgcrypt11 - security update","status":"published","published":"2014-11-25T00:00:00Z","modified":"2026-03-09T02:11:10.399395Z","updated_at":"2026-11-02T15:46:13.584509Z"},{"id":"DSA-3024-1","title":"gnupg - security update","status":"published","published":"2014-09-11T00:00:00Z","modified":"2026-03-09T01:18:03.94387Z","updated_at":"2026-11-02T15:46:15.843838Z"},{"id":"DSA-3073-1","title":"libgcrypt11 - security update","status":"published","published":"2014-11-16T00:00:00Z","modified":"2026-03-09T01:21:32.730296Z","updated_at":"2026-11-02T15:46:15.843838Z"},{"id":"MGASA-2014-0365","title":"Updated libgcrypt packages fix CVE-2014-5270","description":"Updated libgcrypt packages fix security vulnerability:\n\nThe libgcrypt library before version 1.5.4 is vulnerable to an ELGAMAL\nside-channel attack (CVE-2014-5270).\n","status":"published","published":"2014-09-05T09:07:37Z","modified":"2026-04-16T06:25:12.840587352Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"MGASA-2014-0381","title":"Updated gnupg packages fix CVE-2014-5270","description":"Updated gnupg packages fix security vulnerability:\n\nThe gnupg program before version 1.4.16 is vulnerable to an ELGAMAL\nside-channel attack (CVE-2014-5270).\n","status":"published","published":"2014-09-22T08:31:24Z","modified":"2026-04-16T06:24:07.339850799Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"UBUNTU-CVE-2014-5270","description":"Libgcrypt before 1.5.4, as used in GnuPG and other products, does not properly perform ciphertext normalization and ciphertext randomization, which makes it easier for physically proximate attackers to conduct key-extraction attacks by leveraging the ability to collect voltage data from exposed metal, a different vector than CVE-2013-4576.","status":"published","published":"2014-08-18T00:00:00Z","modified":"2026-04-22T09:46:38.363543Z","updated_at":"2026-11-02T15:54:09.010095Z"},{"id":"USN-2339-2","title":"libgcrypt11 vulnerability","description":"Daniel Genkin, Adi Shamir, and Eran Tromer discovered that Libgcrypt was\nsusceptible to an adaptive chosen ciphertext attack via physical side\nchannels. A local attacker could use this attack to possibly recover\nprivate keys.\n","status":"published","published":"2014-09-03T17:36:43Z","modified":"2026-04-22T08:58:51.836334Z","updated_at":"2026-11-02T16:58:09.227524Z"},{"id":"USN-2554-1","title":"gnupg, gnupg2 vulnerabilities","description":"Daniel Genkin, Lev Pachmanov, Itamar Pipman, and Eran Tromer discovered\nthat GnuPG was susceptible to an attack via physical side channels. A local\nattacker could use this attack to possibly recover private keys.\n(CVE-2014-3591)\n\nDaniel Genkin, Adi Shamir, and Eran Tromer discovered that GnuPG was\nsusceptible to an attack via physical side channels. A local attacker could\nuse this attack to possibly recover private keys. (CVE-2015-0837)\n\nHanno Böck discovered that GnuPG incorrectly handled certain malformed\nkeyrings. If a user or automated system were tricked into opening a\nmalformed keyring, a remote attacker could use this issue to cause GnuPG to\ncrash, resulting in a denial of service, or possibly execute arbitrary\ncode. (CVE-2015-1606, CVE-2015-1607)\n\nIn addition, this update improves GnuPG security by validating that the\nkeys returned by keyservers match those requested.\n","status":"published","published":"2015-04-01T13:23:13Z","modified":"2026-02-10T04:40:53Z","updated_at":"2026-11-02T16:58:09.227524Z"}]}}