[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

249622

 
 

909

 
 

195521

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

DSA-2731-1 libgcrypt11 -- information leak

ID: oval:org.secpod.oval:def:601079Date: (C)2013-09-25   (M)2023-12-07
Class: PATCHFamily: unix




Yarom and Falkner discovered that RSA secret keys in applications using the libgcrypt11 library, for example GnuPG 2.x, could be leaked via a side channel attack, where a malicious local user could obtain private key information from another user on the system.

Platform:
Debian 7.0
Debian 6.0
Product:
libgcrypt11
Reference:
DSA-2731-1
CVE-2013-4242
CVE    1
CVE-2013-4242
CPE    3
cpe:/a:gnupg:libgcrypt11
cpe:/o:debian:debian_linux:6.0
cpe:/o:debian:debian_linux:7.0

© SecPod Technologies