CVE-2015-0837

2019-11-2921:10:03

debian

www.cve.org

5.8 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.5%

JSON

The mpi_powm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timing differences when accessing a pre-computed table during modular exponentiation, related to a “Last-Level Cache Side-Channel Attack.”

CNA Affected

[
  {
    "product": "Libgcrypt",
    "vendor": "GNU",
    "versions": [
      {
        "status": "affected",
        "version": "before 1.6.3"
      }
    ]
  },
  {
    "product": "GnuPG",
    "vendor": "GNU",
    "versions": [
      {
        "status": "affected",
        "version": "before 1.4.19"
      }
    ]
  }
]