CVE-2013-4351

Name of the Vulnerable Software and Affected Versions GnuPG versions 1.4.x through 2.1.x

Description The issue allows remote attackers to bypass intended cryptographic protection mechanisms by leveraging a subkey with all bits cleared in a key flags subpacket, which is treated as if all bits are set. This might lead to a violation of the integrity and availability of protected information. The exploitation of this issue can be done remotely.

Recommendations For GnuPG versions 1.4.x through 2.1.x, update to a version that fixes this issue to prevent exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.