Lucene search
+L

26 matches found

Tenable Nessus
Tenable Nessus
•added 2025/11/05 12:00 a.m.•8 views

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989508)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989508 advisory. In the Linux kernel, the following vulnerability has been resolved: soc: qcom: llcc: Handle a second device without data corruption Usually there is only one llcc...

7.1CVSS5.9AI score0.00227EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2015-0837

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The mpipowm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timing differences when...

5.9CVSS6.3AI score0.01952EPSS
SaveExploits0References2
Amd
Amd
•added 2025/02/11 12:00 a.m.•26 views

Last-Level Cache Attack

AMD ID: AMD-SB-7032 Potential Impact: N/A Severity: N/A Summary Researchers from Wuhan University have provided AMD with a paper titled “ZenLeak: Practical Last-Level Cache Side-Channel Attacks on AMD Zen Processors” in which they discuss prime and probe attacks targeting the Last-Level Cache LLC...

7.2AI score
SaveExploits0
OSV
OSV
•added 2024/12/27 3:15 p.m.•7 views

DEBIAN-CVE-2024-56617

In the Linux kernel, the following vulnerability has been resolved: cacheinfo: Allocate memory during CPU hotplug if not done from the primary CPU Commit 5944ce092b97 "archtopology: Build cacheinfo from primary CPU" adds functionality that architectures can use to optionally allocate and build...

5.5CVSS5.7AI score0.00206EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2023/02/15 5:22 a.m.•14 views

SUSE CVE-2015-0837

The mpipowm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timing differences when accessing a pre-computed table during modular exponentiation, related to a "Last-Level Cache Side-Channel Attack."...

5.9CVSS6.5AI score0.01952EPSS
SaveExploits0References21
SUSE CVE
SUSE CVE
•added 2023/02/15 4:49 a.m.•13 views

SUSE CVE-2017-5925

Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern Intel processors. By performing a side-channel attack on the MMU operations, it is possible to leak data and code pointers from JavaScript, breaking ASLR...

7.5CVSS6.7AI score0.01581EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
•added 2023/02/15 4:49 a.m.•12 views

SUSE CVE-2017-5926

Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern AMD processors. By performing a side-channel attack on the MMU operations, it is possible to leak data and code pointers from JavaScript, breaking ASLR...

7.5CVSS6.7AI score0.01581EPSS
SaveExploits1References3
OpenVAS
OpenVAS
•added 2021/04/19 12:00 a.m.•23 views

SUSE: Security Advisory (SUSE-SU-2015:1511-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.9CVSS6AI score0.01952EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2020/04/16 12:00 a.m.•36 views

EulerOS Virtualization 3.0.2.2 : libgcrypt (EulerOS-SA-2020-1498)

According to the versions of the libgcrypt package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Libgcrypt before 1.5.4, as used in GnuPG and other products, does not properly perform ciphertext normalization and ciphertext...

6.8CVSS6.9AI score0.03835EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2020/04/15 12:00 a.m.•41 views

EulerOS 2.0 SP3 : libgcrypt (EulerOS-SA-2020-1400)

According to the versions of the libgcrypt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for Elgamal decryption, which allows physically proxima...

5.9CVSS6.1AI score0.01952EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2020/02/24 12:00 a.m.•31 views

EulerOS 2.0 SP5 : libgcrypt (EulerOS-SA-2020-1114)

According to the version of the libgcrypt packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The mpipowm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timing...

5.9CVSS6.4AI score0.01952EPSS
SaveExploits0References2
NVD
NVD
•added 2019/11/29 10:15 p.m.•29 views

CVE-2015-0837

The mpipowm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timing differences when accessing a pre-computed table during modular exponentiation, related to a "Last-Level Cache Side-Channel Attack."...

5.9CVSS5.7AI score0.01952EPSS
SaveExploits0References5
Prion
Prion
•added 2019/11/29 10:15 p.m.•32 views

Design/Logic Flaw

The mpipowm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timing differences when accessing a pre-computed table during modular exponentiation, related to a "Last-Level Cache Side-Channel Attack."...

4.3CVSS6.2AI score0.01952EPSS
SaveExploits0References5Affected Software3
Cvelist
Cvelist
•added 2019/11/29 9:10 p.m.•42 views

CVE-2015-0837

The mpipowm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timing differences when accessing a pre-computed table during modular exponentiation, related to a "Last-Level Cache Side-Channel Attack."...

5.8AI score0.01952EPSS
SaveExploits0References5
CVE
CVE
•added 2019/11/29 9:10 p.m.•136 views

CVE-2015-0837

CVE-2015-0837 affects Libgcrypt (before 1.6.3) and GnuPG (before 1.4.19). It enables a timing side-channel attack on modular exponentiation using a pre-computed table, related to a Last-Level Cache side-channel attack. The description notes the timing differences that could allow an attacker to o...

5.9CVSS5.4AI score0.01952EPSS
SaveExploits0References5Affected Software2
Debian CVE
Debian CVE
•added 2019/11/29 9:10 p.m.•41 views

CVE-2015-0837

The mpipowm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timing differences when accessing a pre-computed table during modular exponentiation, related to a "Last-Level Cache Side-Channel Attack."...

5.9CVSS5.7AI score0.01952EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/11/29 12:00 a.m.•2 views

CVE-2015-0837: Observable Discrepancy

The mpipowm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timing differences when accessing a pre-computed table during modular exponentiation, related to a "Last-Level Cache Side-Channel Attack."...

5.9CVSS6.4AI score0.01952EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/02/27 12:00 a.m.•3 views

CVE-2017-5925: Exposure of Sensitive Information to an Unauthorized Actor

Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern Intel processors. By performing a side-channel attack on the MMU operations, it is possible to leak data and code pointers from JavaScript, breaking ASLR...

7.5CVSS5.6AI score0.01581EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/02/27 12:00 a.m.•4 views

CVE-2017-5927: Exposure of Sensitive Information to an Unauthorized Actor

Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern ARM processors. By performing a side-channel attack on the MMU operations, it is possible to leak data and code pointers from JavaScript, breaking ASLR...

7.5CVSS5.6AI score0.01581EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/02/27 12:00 a.m.•5 views

CVE-2017-5926: Exposure of Sensitive Information to an Unauthorized Actor

Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern AMD processors. By performing a side-channel attack on the MMU operations, it is possible to leak data and code pointers from JavaScript, breaking ASLR...

7.5CVSS5.6AI score0.01581EPSS
SaveExploits1References2
Rows per page
Query Builder