Back to search
CVE-2013-4242
Published: Aug 19, 2013
Modified: Aug 6, 2024
PUBLISHED
Description
GnuPG before 1.4.14, and Libgcrypt before 1.5.3 as used in GnuPG 2.0.x and possibly other products, allows local users to obtain private RSA keys via a cache side-channel attack involving the L3 cache, aka Flush+Reload.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
DSA-2731
vendor-advisory
x_refsource_DEBIAN
54332
third-party-advisory
x_refsource_SECUNIA
54321
third-party-advisory
x_refsource_SECUNIA
54375
third-party-advisory
x_refsource_SECUNIA
openSUSE-SU-2013:1294
vendor-advisory
x_refsource_SUSE
61464
vdb-entry
x_refsource_BID
USN-1923-1
vendor-advisory
x_refsource_UBUNTU
http://eprint.iacr.org/2013/448
x_refsource_MISC
[gnupg-announce] 20130725 [Announce] [security fix] GnuPG 1.4.14 released
mailing-list
x_refsource_MLIST
VU#976534
third-party-advisory
x_refsource_CERT-VN
DSA-2730
vendor-advisory
x_refsource_DEBIAN
RHSA-2013:1457
vendor-advisory
x_refsource_REDHAT
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=717880
x_refsource_MISC
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
x_refsource_CONFIRM
54318
third-party-advisory
x_refsource_SECUNIA
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now