Уязвимость CVE-2013-4242: Информация

Описание

GnuPG before 1.4.14, and Libgcrypt before 1.5.3 as used in GnuPG 2.0.x and possibly other products, allows local users to obtain private RSA keys via a cache side-channel attack involving the L3 cache, aka Flush+Reload.

Важность: LOW (1,9)

URL: https://nvd.nist.gov/vuln/detail/CVE-2013-4242
Опубликовано: 20 августа 2013 г.
Изменено: 30 октября 2018 г.
Идентификатор типа ошибки: CWE-200

Ссылки на рекомендации, решения и инструменты

Ссылка
Ресурс
http://eprint.iacr.org/2013/448
    openSUSE-SU-2013:1294
    • Vendor Advisory
    54318
    • Vendor Advisory
    http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=717880
      [gnupg-announce] 20130725 [Announce] [security fix] GnuPG 1.4.14 released
        54375
        • Vendor Advisory
        54332
        • Vendor Advisory
        DSA-2731
          USN-1923-1
          • Vendor Advisory
          61464
            DSA-2730
              54321
              • Vendor Advisory
              VU#976534
              • US Government Resource
              RHSA-2013:1457
                http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
                  http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705

                      1. Конфигурация 1

                        cpe:2.3:o:canonical:ubuntu_linux:13.04:*:*:*:*:*:*:*
                        cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*
                        cpe:2.3:o:canonical:ubuntu_linux:12.04:-:lts:*:*:*:*:*
                        cpe:2.3:o:canonical:ubuntu_linux:10.04:-:lts:*:*:*:*:*

                        Конфигурация 2

                        cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
                        cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*

                        Конфигурация 3

                        cpe:2.3:a:gnupg:gnupg:0.9.9:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:0.4.0:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:0.9.0:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:1.2.3:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:0.9.10:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:*:*:*:*:*:*:*:*
                        End including
                        1.4.13
                        cpe:2.3:a:gnupg:gnupg:1.3.3:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:1.0.1:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:1.3.1:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:0.2.19:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:1.2.6:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:0.3.5:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:0.4.1:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:0.9.1:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:1.3.93:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:0.3.0:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:0.9.6:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:0.4.3:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:1.3.2:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:1.4.10:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:0.2.16:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:1.4.0:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:1.2.2:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:1.3.4:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:0.9.4:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:0.9.8:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:0.9.11:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:0.0.0:-:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:0.3.4:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:0.2.18:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:1.0.0:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:0.9.3:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:1.4.12:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:0.3.2:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:1.3.92:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:1.0.7:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:0.2.17:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:1.2.5:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:1.0.2:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:1.0.4:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:1.3.91:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:1.2.1:windows:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:1.0.5:-:win32:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:1.0.4:-:win32:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:0.9.7:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:1.2.0:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:1.0.6:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:1.0.3:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:1.2.7:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:1.4.11:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:0.3.1:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:1.2.1:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:0.3.3:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:1.2.4:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:0.9.5:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:1.0.5:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:0.2.15:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:0.4.4:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:0.9.2:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:1.3.90:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:1.3.0:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:1.3.6:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:0.4.5:*:*:*:*:*:*:*

                        Конфигурация 4

                        cpe:2.3:a:gnupg:gnupg:2.0.1:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:2.0.7:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:2.0.15:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:2.0.8:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:2.0.11:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:2.0.6:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:2.0.10:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:2.0.13:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:2.0.5:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:2.0.17:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:2.0.12:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:2.0.18:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:2.0.16:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:2.0.14:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:2.0.4:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:2.0.3:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:gnupg:2.0.19:*:*:*:*:*:*:*

                        Конфигурация 5

                        cpe:2.3:a:gnupg:libgcrypt:1.4.6:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:libgcrypt:1.4.4:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:libgcrypt:1.5.0:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:libgcrypt:*:*:*:*:*:*:*:*
                        End including
                        1.5.2
                        cpe:2.3:a:gnupg:libgcrypt:1.5.1:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:libgcrypt:1.4.0:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:libgcrypt:1.4.3:*:*:*:*:*:*:*
                        cpe:2.3:a:gnupg:libgcrypt:1.4.5:*:*:*:*:*:*:*

                        Конфигурация 6

                        cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:*
                        cpe:2.3:o:opensuse:opensuse:12.2:*:*:*:*:*:*:*
                    VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
                    Версия: v24.4.2
                    Наверх