Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2013-4242
HistoryAug 19, 2013 - 11:55 p.m.

CVE-2013-4242

2013-08-1923:55:09
CWE-200
[email protected]
web.nvd.nist.gov

1.9 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.3%

JSON

GnuPG before 1.4.14, and Libgcrypt before 1.5.3 as used in GnuPG 2.0.x and possibly other products, allows local users to obtain private RSA keys via a cache side-channel attack involving the L3 cache, aka Flush+Reload.

Affected configurations

NVD
Node
canonicalubuntu_linuxMatch10.04-lts
OR
canonicalubuntu_linuxMatch12.04-lts
OR
canonicalubuntu_linuxMatch12.10
OR
canonicalubuntu_linuxMatch13.04
Node
debiandebian_linuxMatch6.0
OR
debiandebian_linuxMatch7.0
Node
gnupggnupgRange≤1.4.13
OR
gnupggnupgMatch0.0.0-
OR
gnupggnupgMatch0.2.15
OR
gnupggnupgMatch0.2.16
OR
gnupggnupgMatch0.2.17
OR
gnupggnupgMatch0.2.18
OR
gnupggnupgMatch0.2.19
OR
gnupggnupgMatch0.3.0
OR
gnupggnupgMatch0.3.1
OR
gnupggnupgMatch0.3.2
OR
gnupggnupgMatch0.3.3
OR
gnupggnupgMatch0.3.4
OR
gnupggnupgMatch0.3.5
OR
gnupggnupgMatch0.4.0
OR
gnupggnupgMatch0.4.1
OR
gnupggnupgMatch0.4.3
OR
gnupggnupgMatch0.4.4
OR
gnupggnupgMatch0.4.5
OR
gnupggnupgMatch0.9.0
OR
gnupggnupgMatch0.9.1
OR
gnupggnupgMatch0.9.2
OR
gnupggnupgMatch0.9.3
OR
gnupggnupgMatch0.9.4
OR
gnupggnupgMatch0.9.5
OR
gnupggnupgMatch0.9.6
OR
gnupggnupgMatch0.9.7
OR
gnupggnupgMatch0.9.8
OR
gnupggnupgMatch0.9.9
OR
gnupggnupgMatch0.9.10
OR
gnupggnupgMatch0.9.11
OR
gnupggnupgMatch1.0.0
OR
gnupggnupgMatch1.0.1
OR
gnupggnupgMatch1.0.2
OR
gnupggnupgMatch1.0.3
OR
gnupggnupgMatch1.0.4
OR
gnupggnupgMatch1.0.4-win32
OR
gnupggnupgMatch1.0.5
OR
gnupggnupgMatch1.0.5-win32
OR
gnupggnupgMatch1.0.6
OR
gnupggnupgMatch1.0.7
OR
gnupggnupgMatch1.2.0
OR
gnupggnupgMatch1.2.1
OR
gnupggnupgMatch1.2.1windows
OR
gnupggnupgMatch1.2.2
OR
gnupggnupgMatch1.2.3
OR
gnupggnupgMatch1.2.4
OR
gnupggnupgMatch1.2.5
OR
gnupggnupgMatch1.2.6
OR
gnupggnupgMatch1.2.7
OR
gnupggnupgMatch1.3.0
OR
gnupggnupgMatch1.3.1
OR
gnupggnupgMatch1.3.2
OR
gnupggnupgMatch1.3.3
OR
gnupggnupgMatch1.3.4
OR
gnupggnupgMatch1.3.6
OR
gnupggnupgMatch1.3.90
OR
gnupggnupgMatch1.3.91
OR
gnupggnupgMatch1.3.92
OR
gnupggnupgMatch1.3.93
OR
gnupggnupgMatch1.4.0
OR
gnupggnupgMatch1.4.10
OR
gnupggnupgMatch1.4.11
OR
gnupggnupgMatch1.4.12
Node
gnupggnupgMatch2.0.1
OR
gnupggnupgMatch2.0.3
OR
gnupggnupgMatch2.0.4
OR
gnupggnupgMatch2.0.5
OR
gnupggnupgMatch2.0.6
OR
gnupggnupgMatch2.0.7
OR
gnupggnupgMatch2.0.8
OR
gnupggnupgMatch2.0.10
OR
gnupggnupgMatch2.0.11
OR
gnupggnupgMatch2.0.12
OR
gnupggnupgMatch2.0.13
OR
gnupggnupgMatch2.0.14
OR
gnupggnupgMatch2.0.15
OR
gnupggnupgMatch2.0.16
OR
gnupggnupgMatch2.0.17
OR
gnupggnupgMatch2.0.18
OR
gnupggnupgMatch2.0.19
Node
gnupglibgcryptRange≤1.5.2
OR
gnupglibgcryptMatch1.4.0
OR
gnupglibgcryptMatch1.4.3
OR
gnupglibgcryptMatch1.4.4
OR
gnupglibgcryptMatch1.4.5
OR
gnupglibgcryptMatch1.4.6
OR
gnupglibgcryptMatch1.5.0
OR
gnupglibgcryptMatch1.5.1
Node
opensuseopensuseMatch12.2
OR
opensuseopensuseMatch12.3

Related

freebsd 1
nessus 27
openvas 45
oraclelinux 2
redhat 3
ubuntu 1
amazon 2
fedora 9
cve 1
cert 1
f5 2
ubuntucve 1
securityvulns 3
prion 1
cvelist 1
centos 2
slackware 1
altlinux 1
debian 2
mageia 1
veracode 3
gentoo 1
freebsd
freebsd
GnuPG and Libgcrypt -- side-channel attack vulnerability
2013-07-18 00:00:00
nessus
nessus
Ubuntu 10.04 LTS / 12.04 LTS / 12.10 / 13.04 : gnupg, libgcrypt11 vulnerability (USN-1923-1)
2013-08-01 00:00:00
Oracle Solaris Third-Party Patch Update : libgcrypt (cve_2013_4242_information_disclosure)
2015-01-19 00:00:00
Fedora 19 : libgcrypt-1.5.3-1.fc19 (2013-13678)
2013-08-02 00:00:00
openvas
openvas
Fedora Update for gnupg FEDORA-2013-13940
2013-08-16 00:00:00
Oracle: Security Advisory (ELSA-2013-1457)
2015-10-06 00:00:00
Amazon Linux: Security Advisory (ALAS-2013-225)
2015-09-08 00:00:00
oraclelinux
oraclelinux
libgcrypt security update
2013-10-24 00:00:00
gnupg security update
2013-10-24 00:00:00
redhat
redhat
(RHSA-2013:1457) Moderate: libgcrypt security update
2013-10-24 00:00:00
(RHSA-2013:1458) Moderate: gnupg security update
2013-10-24 00:00:00
(RHSA-2013:1527) Important: rhev-hypervisor6 security and bug fix update
2013-11-21 00:00:00
ubuntu
ubuntu
GnuPG, Libgcrypt vulnerability
2013-08-01 00:00:00
amazon
amazon
Medium: gnupg
2013-09-19 15:29:00
Medium: libgcrypt
2013-09-19 15:49:00
fedora
fedora
[SECURITY] Fedora 19 Update: libgcrypt-1.5.3-1.fc19
2013-08-02 03:22:41
[SECURITY] Fedora 19 Update: gnupg-1.4.14-1.fc19
2013-08-09 17:07:46
[SECURITY] Fedora 19 Update: mingw-libgcrypt-1.5.3-1.fc19
2014-06-10 03:02:17
cve
cve
CVE-2013-4242
2013-08-19 23:55:09
cert
cert
L3 CPU shared cache architecture is susceptible to a Flush+Reload side-channel attack
2013-10-01 00:00:00
f5
f5
SOL75253136 - GnuPG vulnerability CVE-2013-4242
2016-02-19 00:00:00
K75253136 : GnuPG vulnerability CVE-2013-4242
2016-02-19 00:00:00
ubuntucve
ubuntucve
CVE-2013-4242
2013-07-29 00:00:00
securityvulns
securityvulns
[slackware-security] gnupg / libgcrypt (SSA:2013-215-01)
2013-08-12 00:00:00
gnupg / libcrypt RSA implementation flush+reload timing attack
2013-08-12 00:00:00
ESA-2015-002: Unisphere Central Security Update for Multiple Vulnerabilities
2015-02-02 00:00:00
prion
prion
Design/Logic Flaw
2013-08-19 23:55:00
cvelist
cvelist
CVE-2013-4242
2013-08-19 23:00:00
centos
centos
libgcrypt security update
2013-10-24 16:06:22
gnupg security update
2013-10-25 14:00:34
slackware
slackware
[slackware-security] gnupg / libgcrypt
2013-08-03 22:26:17
altlinux
altlinux
Security fix for the ALT Linux 7 package gnupg version 1.4.14-alt1
2013-07-25 00:00:00
debian
debian
[SECURITY] [DSA 2730-1] gnupg security update
2013-07-29 18:49:06
[SECURITY] [DSA 2731-1] libgcrypt11 security update
2013-07-29 18:50:25
mageia
mageia
Updated gnupg package fixes security vulnerability
2013-08-03 12:45:05
veracode
veracode
Information Disclosure
2019-01-15 09:01:17
Denial Of Service (DOS)
2019-05-02 04:56:46
Information Disclosure
2019-05-02 04:56:46
gentoo
gentoo
GnuPG, Libgcrypt: Multiple vulnerabilities
2014-02-21 00:00:00

1.9 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.3%

JSON
Related for NVD:CVE-2013-4242
freebsd1nessus27openvas45oraclelinux2redhat3ubuntu1amazon2fedora9cve1cert1f52ubuntucve1securityvulns3prion1cvelist1centos2slackware1altlinux1debian2mageia1veracode3gentoo1