CVE-2013-4242

GnuPG before 1.4.14, and Libgcrypt before 1.5.3 as used in GnuPG 2.0.x and possibly other products, allows local users to obtain private RSA keys via a cache side-channel attack involving the L3 cache, aka Flush+Reload...

PT-2013-1070

Name of the Vulnerable Software and Affected Versions libgcrypt versions 1.4.4 through 1.4.5 libgcrypt-devel versions 1.4.4 through 1.4.5 libgcrypt-debuginfo versions 1.4.4 through 1.4.5 GnuPG versions prior to 1.4.14 Libgcrypt versions prior to 1.5.3 Description The issue allows local users to...

gnupg -- side channel attack on RSA secret keys

A Yarom and Falkner paper reports: Flush+Reload is a cache side-channel attack that monitors access to data in shared pages. In this paper we demonstrate how to use the attack to extract private encryption keys from GnuPG. The high resolution and low noise of the Flush+Reload attack enables a spy...

CVE-2011-4692: Undefined Security Weakness

WebKit, as used in Apple Safari 5.1.1 and earlier and Google Chrome 15 and earlier, does not prevent capture of data about the time required for image loading, which makes it easier for remote attackers to determine whether an image exists in the browser cache via crafted JavaScript code, as...