Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2013-4242
1.9
LOWCVSS v2
Published
August 19, 2013
Affected
1 project
Assigned by
Red Hat
Severity scale
010
Description
GnuPG before 1.4.14, and Libgcrypt before 1.5.3 as used in GnuPG 2.0.x and possibly other products, allows local users to obtain private RSA keys via a cache side-channel attack involving the L3 cache, aka Flush+Reload.
gpg/gnupg
GitHubThe GNU Privacy Guard. NOTE: Maintainers are not tracking this mirror. Do not make pull requests here, nor comment any commits, submit them usual way to bug tracker (https://www.gnupg.org/documentation/bts.html) or to the mailing list (https://www.gnupg.org/documentation/mailing-lists.html).
GitHubThe GNU Privacy Guard. NOTE: Maintainers are not tracking this mirror. Do not make pull requests here, nor comment any commits, submit them usual way to bug tracker (https://www.gnupg.org/documentation/bts.html) or to the mailing list (https://www.gnupg.org/documentation/mailing-lists.html).= 0.9.9, = 0.4.0, = 0.9.0, = 1.2.3, = 0.9.10, <= 1.4.13, = 1.3.3, = 1.0.1, = 1.3.1, = 0.9.4, = 0.4.3, = 0.4.1, = 0.3.0, = 0.2.19, = 1.4.10, = 1.3.4, = 0.9.8, = 0.9.1, = 0.2.16, = 1.2.6, = 0.9.11, = 0.3.5, = 1.4.0, = 1.3.93, = 1.3.2, = 1.2.2, = 0.9.6, = 1.3.92, = 1.3.91, = 1.3.0, = 1.2.7, = 1.2.1, = 1.2.0, = 1.0.2, = 0.9.3, = 0.4.4, = 1.4.11, = 1.2.4, = 1.0.5, = 1.0.4, = 0.9.7, = 0.3.4, = 0.3.3, = 0.2.15, = 1.4.12, = 1.3.90, = 1.3.6, = 1.2.5, = 1.0.7, = 1.0.6, = 1.0.0, = 0.9.2, = 0.2.18, = 0.2.17, = 1.0.3, = 0.9.5, = 0.4.5, = 0.3.2, = 0.3.1, = 0.0.0, = 2.0.1, = 2.0.7, = 2.0.15, = 2.0.8, = 2.0.11, = 2.0.6, = 2.0.10, = 2.0.13, = 2.0.5, = 2.0.18, = 2.0.19, = 2.0.14, = 2.0.12, = 2.0.3, = 2.0.4, = 2.0.16, = 2.0.17NVD