CVE-2014-3591

Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for Elgamal decryption, which allows physically proximate attackers to obtain the server's private key by determining factors using crafted ciphertext and the fluctuations in the electromagnetic field during multiplication.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

In order to successfully exploit this flaw the attacker needs to following conditions:

1. They need to be very close to the system, in order to record the fluctuations in the electromagnetic waves being emitted by the system.
2. The attacker needs to send specially-crafted cipher text to the system for decryption.
3. The attacker needs to record the electromagnetic fluctuations when these cipher texts are being decrypted.

The above conditions can be true only when a laptop is being used for decryption in an unsafe external environment. Typical server setups may not be vulnerable.