Lucene search
AmazonALAS-2013-225HistorySep 19, 2013 - 3:29 p.m.
Medium: gnupg
2013-09-1915:29:00
alas.aws.amazon.com
17
1.9 Low
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:M/Au:N/C:P/I:N/A:N
0.0004 Low
EPSS
Percentile
5.4%
Issue Overview:
GnuPG before 1.4.14, and Libgcrypt before 1.5.3 as used in GnuPG 2.0.x and possibly other products, allows local users to obtain private RSA keys via a cache side-channel attack involving the L3 cache, aka Flush+Reload.
Affected Packages:
gnupg
Issue Correction:
Run yum update gnupg to update your system.
New Packages:
i686:
gnupg-debuginfo-1.4.14-1.20.amzn1.i686
gnupg-1.4.14-1.20.amzn1.i686
src:
gnupg-1.4.14-1.20.amzn1.src
x86_64:
gnupg-1.4.14-1.20.amzn1.x86_64
gnupg-debuginfo-1.4.14-1.20.amzn1.x86_64
Additional References
Red Hat: CVE-2013-4242
Mitre: CVE-2013-4242
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Amazon Linux | 1 | i686 | gnupg-debuginfo | < 1.4.14-1.20.amzn1 | gnupg-debuginfo-1.4.14-1.20.amzn1.i686.rpm |
| Amazon Linux | 1 | i686 | gnupg | < 1.4.14-1.20.amzn1 | gnupg-1.4.14-1.20.amzn1.i686.rpm |
| Amazon Linux | 1 | x86_64 | gnupg | < 1.4.14-1.20.amzn1 | gnupg-1.4.14-1.20.amzn1.x86_64.rpm |
| Amazon Linux | 1 | x86_64 | gnupg-debuginfo | < 1.4.14-1.20.amzn1 | gnupg-debuginfo-1.4.14-1.20.amzn1.x86_64.rpm |
Related
nessus
nessus
Ubuntu 10.04 LTS / 12.04 LTS / 12.10 / 13.04 : gnupg, libgcrypt11 vulnerability (USN-1923-1)
2013-08-01 00:00:00
CentOS 5 / 6 : libgcrypt (CESA-2013:1457)
2013-10-27 00:00:00
Fedora 19 : libgcrypt-1.5.3-1.fc19 (2013-13678)
2013-08-02 00:00:00
openvas
openvas
Fedora Update for gnupg FEDORA-2013-13940
2013-08-16 00:00:00
Oracle: Security Advisory (ELSA-2013-1457)
2015-10-06 00:00:00
Fedora Update for libgcrypt FEDORA-2013-13678
2013-08-20 00:00:00
freebsd
freebsd
GnuPG and Libgcrypt -- side-channel attack vulnerability
2013-07-18 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: libgcrypt-1.5.3-1.fc19
2013-08-02 03:22:41
[SECURITY] Fedora 19 Update: gnupg-1.4.14-1.fc19
2013-08-09 17:07:46
[SECURITY] Fedora 19 Update: mingw-libgcrypt-1.5.3-1.fc19
2014-06-10 03:02:17
redhat
redhat
(RHSA-2013:1457) Moderate: libgcrypt security update
2013-10-24 00:00:00
(RHSA-2013:1458) Moderate: gnupg security update
2013-10-24 00:00:00
(RHSA-2013:1527) Important: rhev-hypervisor6 security and bug fix update
2013-11-21 00:00:00
oraclelinux
oraclelinux
libgcrypt security update
2013-10-24 00:00:00
gnupg security update
2013-10-24 00:00:00
ubuntu
ubuntu
GnuPG, Libgcrypt vulnerability
2013-08-01 00:00:00
f5
f5
K75253136 : GnuPG vulnerability CVE-2013-4242
2016-02-19 00:00:00
SOL75253136 - GnuPG vulnerability CVE-2013-4242
2016-02-19 00:00:00
prion
prion
Design/Logic Flaw
2013-08-19 23:55:00
securityvulns
securityvulns
[slackware-security] gnupg / libgcrypt (SSA:2013-215-01)
2013-08-12 00:00:00
gnupg / libcrypt RSA implementation flush+reload timing attack
2013-08-12 00:00:00
ESA-2015-002: Unisphere Central Security Update for Multiple Vulnerabilities
2015-02-02 00:00:00
ubuntucve
ubuntucve
CVE-2013-4242
2013-07-29 00:00:00
cve
cve
CVE-2013-4242
2013-08-19 23:55:00
cert
cert
veracode
veracode
Information Disclosure
2019-01-15 09:01:17
Denial Of Service (DOS)
2019-05-02 04:56:46
Information Disclosure
2019-05-02 04:56:46
debian
debian
[SECURITY] [DSA 2731-1] libgcrypt11 security update
2013-07-29 18:50:25
[SECURITY] [DSA 2730-1] gnupg security update
2013-07-29 18:49:06
amazon
amazon
Medium: libgcrypt
2013-09-19 15:49:00
mageia
mageia
Updated gnupg package fixes security vulnerability
2013-08-03 12:45:05
centos
centos
libgcrypt security update
2013-10-24 16:06:22
gnupg security update
2013-10-25 14:00:34
slackware
slackware
[slackware-security] gnupg / libgcrypt
2013-08-03 22:26:17
altlinux
altlinux
Security fix for the ALT Linux 7 package gnupg version 1.4.14-alt1
2013-07-25 00:00:00
gentoo
gentoo
GnuPG, Libgcrypt: Multiple vulnerabilities
2014-02-21 00:00:00
1.9 Low
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:M/Au:N/C:P/I:N/A:N
0.0004 Low
EPSS
Percentile
5.4%
Related for ALAS-2013-225