CVE-2013-4242: Infoleak
GnuPG before 1.4.14, and Libgcrypt before 1.5.3 as used in GnuPG 2.0.x and possibly other products, allows local users to obtain private RSA keys via a cache side-channel attack involving the L3 cache, aka Flush+Reload.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4242?
CVE-2013-4242 has a high severity rating due to its potential to allow local users to obtain private RSA keys through a cache side-channel attack.
How do I fix CVE-2013-4242?
To mitigate CVE-2013-4242, update GnuPG to version 1.4.14 or later and Libgcrypt to version 1.5.3 or later.
What versions of GnuPG are affected by CVE-2013-4242?
GnuPG versions prior to 1.4.14 are affected by CVE-2013-4242.
What operating systems are impacted by CVE-2013-4242?
CVE-2013-4242 impacts various versions of Ubuntu, Debian, and openSUSE that utilize affected versions of GnuPG and Libgcrypt.
Is CVE-2013-4242 a remote or local vulnerability?
CVE-2013-4242 is a local vulnerability that can be exploited by local users on the affected system.