Lucene search
F5F5:K75253136HistoryFeb 19, 2016 - 12:00 a.m.
K75253136 : GnuPG vulnerability CVE-2013-4242
2016-02-1900:00:00
my.f5.com
27
Security Advisory Description
GnuPG before 1.4.14, and Libgcrypt before 1.5.3 as used in GnuPG 2.0.x and possibly other products, allows local users to obtain private RSA keys via a cache side-channel attack involving the L3 cache, aka Flush+Reload. (CVE-2013-4242)
Impact
A local user may obtain confidential information by exploiting this vulnerability.
Note: This is only used directly in verification of ISOs and ASM signatures, which does open up some risk, but only during the verification process.
Related
oraclelinux
oraclelinux
libgcrypt security update
2013-10-24 00:00:00
gnupg security update
2013-10-24 00:00:00
redhat
redhat
(RHSA-2013:1457) Moderate: libgcrypt security update
2013-10-24 00:00:00
(RHSA-2013:1458) Moderate: gnupg security update
2013-10-24 00:00:00
(RHSA-2013:1527) Important: rhev-hypervisor6 security and bug fix update
2013-11-21 00:00:00
nessus
nessus
Oracle Solaris Third-Party Patch Update : libgcrypt (cve_2013_4242_information_disclosure)
2015-01-19 00:00:00
Fedora 19 : libgcrypt-1.5.3-1.fc19 (2013-13678)
2013-08-02 00:00:00
CentOS 5 / 6 : libgcrypt (CESA-2013:1457)
2013-10-27 00:00:00
openvas
openvas
Amazon Linux: Security Advisory (ALAS-2013-225)
2015-09-08 00:00:00
Fedora Update for libgcrypt FEDORA-2013-13678
2013-08-20 00:00:00
Debian: Security Advisory (DSA-2730-1)
2013-07-28 00:00:00
ubuntu
ubuntu
GnuPG, Libgcrypt vulnerability
2013-08-01 00:00:00
amazon
amazon
Medium: gnupg
2013-09-19 15:29:00
Medium: libgcrypt
2013-09-19 15:49:00
fedora
fedora
[SECURITY] Fedora 19 Update: libgcrypt-1.5.3-1.fc19
2013-08-02 03:22:41
[SECURITY] Fedora 19 Update: gnupg-1.4.14-1.fc19
2013-08-09 17:07:46
[SECURITY] Fedora 19 Update: mingw-libgcrypt-1.5.3-1.fc19
2014-06-10 03:02:17
freebsd
freebsd
GnuPG and Libgcrypt -- side-channel attack vulnerability
2013-07-18 00:00:00
debian
debian
[SECURITY] [DSA 2730-1] gnupg security update
2013-07-29 18:49:06
[SECURITY] [DSA 2731-1] libgcrypt11 security update
2013-07-29 18:50:25
mageia
mageia
Updated gnupg package fixes security vulnerability
2013-08-03 12:45:05
securityvulns
securityvulns
gnupg / libcrypt RSA implementation flush+reload timing attack
2013-08-12 00:00:00
[slackware-security] gnupg / libgcrypt (SSA:2013-215-01)
2013-08-12 00:00:00
ESA-2015-002: Unisphere Central Security Update for Multiple Vulnerabilities
2015-02-02 00:00:00
veracode
veracode
Information Disclosure
2019-01-15 09:01:17
Denial Of Service (DOS)
2019-05-02 04:56:46
Information Disclosure
2019-05-02 04:56:46
nvd
nvd
CVE-2013-4242
2013-08-19 23:55:09
cert
cert
f5
f5
SOL75253136 - GnuPG vulnerability CVE-2013-4242
2016-02-19 00:00:00
ubuntucve
ubuntucve
CVE-2013-4242
2013-07-29 00:00:00
prion
prion
Design/Logic Flaw
2013-08-19 23:55:00
cvelist
cvelist
CVE-2013-4242
2013-08-19 23:00:00
cve
cve
CVE-2013-4242
2013-08-19 23:55:09
centos
centos
libgcrypt security update
2013-10-24 16:06:22
gnupg security update
2013-10-25 14:00:34
slackware
slackware
[slackware-security] gnupg / libgcrypt
2013-08-03 22:26:17
altlinux
altlinux
Security fix for the ALT Linux 7 package gnupg version 1.4.14-alt1
2013-07-25 00:00:00
gentoo
gentoo
GnuPG, Libgcrypt: Multiple vulnerabilities
2014-02-21 00:00:00