1.9

CVE-2013-4242

GnuPG before 1.4.14, and Libgcrypt before 1.5.3 as used in GnuPG 2.0.x and possibly other products, allows local users to obtain private RSA keys via a cache side-channel attack involving the L3 cache, aka Flush+Reload.

Data is provided by the National Vulnerability Database (NVD)
Canonical ≫ Ubuntu Linux Version10.04 Update- Editionlts
Canonical ≫ Ubuntu Linux Version12.04 Update- Editionlts
Canonical ≫ Ubuntu Linux Version12.10
Canonical ≫ Ubuntu Linux Version13.04
Debian ≫ Debian Linux Version6.0
Debian ≫ Debian Linux Version7.0
Gnupg ≫ Gnupg Version <= 1.4.13
Gnupg ≫ Gnupg Version0.0.0 Update-
Gnupg ≫ Gnupg Version0.2.15
Gnupg ≫ Gnupg Version0.2.16
Gnupg ≫ Gnupg Version0.2.17
Gnupg ≫ Gnupg Version0.2.18
Gnupg ≫ Gnupg Version0.2.19
Gnupg ≫ Gnupg Version0.3.0
Gnupg ≫ Gnupg Version0.3.1
Gnupg ≫ Gnupg Version0.3.2
Gnupg ≫ Gnupg Version0.3.3
Gnupg ≫ Gnupg Version0.3.4
Gnupg ≫ Gnupg Version0.3.5
Gnupg ≫ Gnupg Version0.4.0
Gnupg ≫ Gnupg Version0.4.1
Gnupg ≫ Gnupg Version0.4.3
Gnupg ≫ Gnupg Version0.4.4
Gnupg ≫ Gnupg Version0.4.5
Gnupg ≫ Gnupg Version0.9.0
Gnupg ≫ Gnupg Version0.9.1
Gnupg ≫ Gnupg Version0.9.2
Gnupg ≫ Gnupg Version0.9.3
Gnupg ≫ Gnupg Version0.9.4
Gnupg ≫ Gnupg Version0.9.5
Gnupg ≫ Gnupg Version0.9.6
Gnupg ≫ Gnupg Version0.9.7
Gnupg ≫ Gnupg Version0.9.8
Gnupg ≫ Gnupg Version0.9.9
Gnupg ≫ Gnupg Version0.9.10
Gnupg ≫ Gnupg Version0.9.11
Gnupg ≫ Gnupg Version1.0.0
Gnupg ≫ Gnupg Version1.0.1
Gnupg ≫ Gnupg Version1.0.2
Gnupg ≫ Gnupg Version1.0.3
Gnupg ≫ Gnupg Version1.0.4
Gnupg ≫ Gnupg Version1.0.4 Update- Editionwin32
Gnupg ≫ Gnupg Version1.0.5
Gnupg ≫ Gnupg Version1.0.5 Update- Editionwin32
Gnupg ≫ Gnupg Version1.0.6
Gnupg ≫ Gnupg Version1.0.7
Gnupg ≫ Gnupg Version1.2.0
Gnupg ≫ Gnupg Version1.2.1
Gnupg ≫ Gnupg Version1.2.1 Updatewindows
Gnupg ≫ Gnupg Version1.2.2
Gnupg ≫ Gnupg Version1.2.3
Gnupg ≫ Gnupg Version1.2.4
Gnupg ≫ Gnupg Version1.2.5
Gnupg ≫ Gnupg Version1.2.6
Gnupg ≫ Gnupg Version1.2.7
Gnupg ≫ Gnupg Version1.3.0
Gnupg ≫ Gnupg Version1.3.1
Gnupg ≫ Gnupg Version1.3.2
Gnupg ≫ Gnupg Version1.3.3
Gnupg ≫ Gnupg Version1.3.4
Gnupg ≫ Gnupg Version1.3.6
Gnupg ≫ Gnupg Version1.3.90
Gnupg ≫ Gnupg Version1.3.91
Gnupg ≫ Gnupg Version1.3.92
Gnupg ≫ Gnupg Version1.3.93
Gnupg ≫ Gnupg Version1.4.0
Gnupg ≫ Gnupg Version1.4.10
Gnupg ≫ Gnupg Version1.4.11
Gnupg ≫ Gnupg Version1.4.12
Gnupg ≫ Gnupg Version2.0.1
Gnupg ≫ Gnupg Version2.0.3
Gnupg ≫ Gnupg Version2.0.4
Gnupg ≫ Gnupg Version2.0.5
Gnupg ≫ Gnupg Version2.0.6
Gnupg ≫ Gnupg Version2.0.7
Gnupg ≫ Gnupg Version2.0.8
Gnupg ≫ Gnupg Version2.0.10
Gnupg ≫ Gnupg Version2.0.11
Gnupg ≫ Gnupg Version2.0.12
Gnupg ≫ Gnupg Version2.0.13
Gnupg ≫ Gnupg Version2.0.14
Gnupg ≫ Gnupg Version2.0.15
Gnupg ≫ Gnupg Version2.0.16
Gnupg ≫ Gnupg Version2.0.17
Gnupg ≫ Gnupg Version2.0.18
Gnupg ≫ Gnupg Version2.0.19
Gnupg ≫ Libgcrypt Version <= 1.5.2
Gnupg ≫ Libgcrypt Version1.4.0
Gnupg ≫ Libgcrypt Version1.4.3
Gnupg ≫ Libgcrypt Version1.4.4
Gnupg ≫ Libgcrypt Version1.4.5
Gnupg ≫ Libgcrypt Version1.4.6
Gnupg ≫ Libgcrypt Version1.5.0
Gnupg ≫ Libgcrypt Version1.5.1
Opensuse ≫ Opensuse Version12.2
Opensuse ≫ Opensuse Version12.3
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.16% 0.371
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 1.9 3.4 2.9
AV:L/AC:M/Au:N/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.