NetSight
IP …
low1.9

CVE-2013-4242

GnuPG before 1.4.14, and Libgcrypt before 1.5.3 as used in GnuPG 2.0.x and possibly other products, allows local users to obtain private RSA keys via a cache s…

Impact

GnuPG before 1.4.14, and Libgcrypt before 1.5.3 as used in GnuPG 2.0.x and possibly other products, allows local users to obtain private RSA keys via a cache side-channel attack involving the L3 cache, aka Flush+Reload.

Affected products

VendorProductAffected versions
CanonicalUbuntu Linux
Versions 10.04, 12.04, 12.10, 13.04
DebianDebian Linux
Versions 6.0, 7.0
GnupgGnupg
through 1.4.13
Versions 0.0.0, 0.2.15, 0.2.16, 0.2.17, 0.2.18
GnupgLibgcrypt
through 1.5.2
Versions 1.4.0, 1.4.3, 1.4.4, 1.4.5, 1.4.6
OpensuseOpensuse
Versions 12.2, 12.3

Weakness classification

CWE-200

References