VDB

GCVE-110-CERTCC-2003-940388

GCVE-110-CERTCC-2003-940388
Advisory Published
Vulnetix · Advisory published November 27, 2003
Gnu Privacy Guard (GnuPG) is a cryptographic utility used to generate cryptographic keys and perform other cryptographic functions. A vulnerability in the way GnuPG generates ElGamal keys has been discovered. This vulnerability renders ElGamal signing key untrustworthy.
Download JSON Open in Console

Risk Scores

certcc-cam
certcc-cam
impact15population5exploitation0widely_known15score_current6.328125ease_of_exploitation12

Aliases

CVE-2003-0971

Transitive aliases

GHSA-3rmj-3mrh-fv5jRHSA-2003:175RHSA-2003:395GSD-2003-0971EUVD-2003-0961BDU:2015-08014DSA-429GHSA-v66g-8h9c-j8vhRHSA-2003:390EUVD-2003-0250GSD-2003-0255RHSA-2003:176CVE-2003-0255CERTCC-2003-397604

References

GnuPG creates ElGamal keys for signing using insufficient entropy
advisory
GnuPG creates ElGamal keys for signing using insufficient entropy
url
GnuPG creates ElGamal keys for signing using insufficient entropy
url
GnuPG creates ElGamal keys for signing using insufficient entropy
url
GnuPG creates ElGamal keys for signing using insufficient entropy
url
GnuPG creates ElGamal keys for signing using insufficient entropy
url

Browse GCVE Records

72,409 records in the GCVE database · Updated July 14, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›