Lucene search
FreeBSD689C2BF7-0701-11E3-9A25-002590860428HistoryJul 18, 2013 - 12:00 a.m.
GnuPG and Libgcrypt -- side-channel attack vulnerability
2013-07-1800:00:00
vuxml.freebsd.org
13
1.9 Low
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:M/Au:N/C:P/I:N/A:N
0.0004 Low
EPSS
Percentile
5.4%
Werner Koch of the GNU project reports:
Noteworthy changes in version 1.5.3:
Mitigate the Yarom/Falkner flush+reload side-channel attack on RSA secret keys…
Note that Libgcrypt is used by GnuPG 2.x and thus this release fixes the above
problem. The fix for GnuPG less than 2.0 can be found in the just released GnuPG
1.4.14.
Related
nessus
nessus
Ubuntu 10.04 LTS / 12.04 LTS / 12.10 / 13.04 : gnupg, libgcrypt11 vulnerability (USN-1923-1)
2013-08-01 00:00:00
CentOS 5 / 6 : libgcrypt (CESA-2013:1457)
2013-10-27 00:00:00
Fedora 19 : libgcrypt-1.5.3-1.fc19 (2013-13678)
2013-08-02 00:00:00
openvas
openvas
Fedora Update for gnupg FEDORA-2013-13940
2013-08-16 00:00:00
Oracle: Security Advisory (ELSA-2013-1457)
2015-10-06 00:00:00
Fedora Update for libgcrypt FEDORA-2013-13678
2013-08-20 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: libgcrypt-1.5.3-1.fc19
2013-08-02 03:22:41
[SECURITY] Fedora 19 Update: gnupg-1.4.14-1.fc19
2013-08-09 17:07:46
[SECURITY] Fedora 19 Update: mingw-libgcrypt-1.5.3-1.fc19
2014-06-10 03:02:17
redhat
redhat
(RHSA-2013:1457) Moderate: libgcrypt security update
2013-10-24 00:00:00
(RHSA-2013:1458) Moderate: gnupg security update
2013-10-24 00:00:00
(RHSA-2013:1527) Important: rhev-hypervisor6 security and bug fix update
2013-11-21 00:00:00
oraclelinux
oraclelinux
libgcrypt security update
2013-10-24 00:00:00
gnupg security update
2013-10-24 00:00:00
ubuntu
ubuntu
GnuPG, Libgcrypt vulnerability
2013-08-01 00:00:00
amazon
amazon
Medium: gnupg
2013-09-19 15:29:00
Medium: libgcrypt
2013-09-19 15:49:00
f5
f5
K75253136 : GnuPG vulnerability CVE-2013-4242
2016-02-19 00:00:00
SOL75253136 - GnuPG vulnerability CVE-2013-4242
2016-02-19 00:00:00
prion
prion
Design/Logic Flaw
2013-08-19 23:55:00
securityvulns
securityvulns
[slackware-security] gnupg / libgcrypt (SSA:2013-215-01)
2013-08-12 00:00:00
gnupg / libcrypt RSA implementation flush+reload timing attack
2013-08-12 00:00:00
ESA-2015-002: Unisphere Central Security Update for Multiple Vulnerabilities
2015-02-02 00:00:00
ubuntucve
ubuntucve
CVE-2013-4242
2013-07-29 00:00:00
cve
cve
CVE-2013-4242
2013-08-19 23:55:00
cert
cert
veracode
veracode
Information Disclosure
2019-01-15 09:01:17
Denial Of Service (DOS)
2019-05-02 04:56:46
Information Disclosure
2019-05-02 04:56:46
debian
debian
[SECURITY] [DSA 2731-1] libgcrypt11 security update
2013-07-29 18:50:25
[SECURITY] [DSA 2730-1] gnupg security update
2013-07-29 18:49:06
mageia
mageia
Updated gnupg package fixes security vulnerability
2013-08-03 12:45:05
centos
centos
libgcrypt security update
2013-10-24 16:06:22
gnupg security update
2013-10-25 14:00:34
slackware
slackware
[slackware-security] gnupg / libgcrypt
2013-08-03 22:26:17
altlinux
altlinux
Security fix for the ALT Linux 7 package gnupg version 1.4.14-alt1
2013-07-25 00:00:00
gentoo
gentoo
GnuPG, Libgcrypt: Multiple vulnerabilities
2014-02-21 00:00:00
1.9 Low
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:M/Au:N/C:P/I:N/A:N
0.0004 Low
EPSS
Percentile
5.4%
Related for 689C2BF7-0701-11E3-9A25-002590860428