Skip to content
fr Sign in
Not rated

CVE-2015-0837 The mpi_powm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information…

Description

The mpi_powm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timing differences when accessing a pre-computed table during modular exponentiation, related to a "Last-Level Cache Side-Channel Attack."

Affected products and versions

Product Affected versions Fixed in
Libgcrypt Versions not published
GnuPG Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Libgcrypt

The 2 CVEs of Libgcrypt →
CVE-2014-3591 Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for Elgamal decryption, which… Not rated
Track this CVE