CVE-2013-4242

Published: Aug 19, 2013Modified: Apr 29, 2026

1.9

Vector

AV:L/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 3.4 / Impact: 2.9

Source: NVD

Description

GnuPG before 1.4.14, and Libgcrypt before 1.5.3 as used in GnuPG 2.0.x and possibly other products, allows local users to obtain private RSA keys via a cache side-channel attack involving the L3 cache, aka Flush+Reload.

Affected (96)

Products: Canonical: Ubuntu Linux · Debian: Debian Linux · Gnupg: Gnupg, Libgcrypt · +1 more

Show all products

Canonical: Ubuntu Linux · Debian: Debian Linux · Gnupg: Gnupg, Libgcrypt · Opensuse: Opensuse

1 product

1 product

2 products

1 product

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 10.04
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 12.10
Canonical Ubuntu Linux	Version 13.04

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 6.0
Debian Debian Linux	Version 7.0

Configuration C

63 vulnerable

Vulnerable Software	Affected Versions
Gnupg Gnupg	Up to 1.4.13
Gnupg Gnupg	Version 0.0.0
Gnupg Gnupg	Version 0.2.15
Gnupg Gnupg	Version 0.2.16
Gnupg Gnupg	Version 0.2.17
Gnupg Gnupg	Version 0.2.18
Gnupg Gnupg	Version 0.2.19
Gnupg Gnupg	Version 0.3.0
Gnupg Gnupg	Version 0.3.1
Gnupg Gnupg	Version 0.3.2
Gnupg Gnupg	Version 0.3.3
Gnupg Gnupg	Version 0.3.4
Gnupg Gnupg	Version 0.3.5
Gnupg Gnupg	Version 0.4.0
Gnupg Gnupg	Version 0.4.1
Gnupg Gnupg	Version 0.4.3
Gnupg Gnupg	Version 0.4.4
Gnupg Gnupg	Version 0.4.5
Gnupg Gnupg	Version 0.9.0
Gnupg Gnupg	Version 0.9.10
Gnupg Gnupg	Version 0.9.11
Gnupg Gnupg	Version 0.9.1
Gnupg Gnupg	Version 0.9.2
Gnupg Gnupg	Version 0.9.3
Gnupg Gnupg	Version 0.9.4
Gnupg Gnupg	Version 0.9.5
Gnupg Gnupg	Version 0.9.6
Gnupg Gnupg	Version 0.9.7
Gnupg Gnupg	Version 0.9.8
Gnupg Gnupg	Version 0.9.9
Gnupg Gnupg	Version 1.0.0
Gnupg Gnupg	Version 1.0.1
Gnupg Gnupg	Version 1.0.2
Gnupg Gnupg	Version 1.0.3
Gnupg Gnupg	Version 1.0.4
Gnupg Gnupg	Version 1.0.4
Gnupg Gnupg	Version 1.0.5
Gnupg Gnupg	Version 1.0.5
Gnupg Gnupg	Version 1.0.6
Gnupg Gnupg	Version 1.0.7
Gnupg Gnupg	Version 1.2.0
Gnupg Gnupg	Version 1.2.1
Gnupg Gnupg	Version 1.2.1 windows
Gnupg Gnupg	Version 1.2.2
Gnupg Gnupg	Version 1.2.3
Gnupg Gnupg	Version 1.2.4
Gnupg Gnupg	Version 1.2.5
Gnupg Gnupg	Version 1.2.6
Gnupg Gnupg	Version 1.2.7
Gnupg Gnupg	Version 1.3.0
Gnupg Gnupg	Version 1.3.1
Gnupg Gnupg	Version 1.3.2
Gnupg Gnupg	Version 1.3.3
Gnupg Gnupg	Version 1.3.4
Gnupg Gnupg	Version 1.3.6
Gnupg Gnupg	Version 1.3.90
Gnupg Gnupg	Version 1.3.91
Gnupg Gnupg	Version 1.3.92
Gnupg Gnupg	Version 1.3.93
Gnupg Gnupg	Version 1.4.0
Gnupg Gnupg	Version 1.4.10
Gnupg Gnupg	Version 1.4.11
Gnupg Gnupg	Version 1.4.12

Configuration D

17 vulnerable

Vulnerable Software	Affected Versions
Gnupg Gnupg	Version 2.0.10
Gnupg Gnupg	Version 2.0.11
Gnupg Gnupg	Version 2.0.12
Gnupg Gnupg	Version 2.0.13
Gnupg Gnupg	Version 2.0.14
Gnupg Gnupg	Version 2.0.15
Gnupg Gnupg	Version 2.0.16
Gnupg Gnupg	Version 2.0.17
Gnupg Gnupg	Version 2.0.18
Gnupg Gnupg	Version 2.0.19
Gnupg Gnupg	Version 2.0.1
Gnupg Gnupg	Version 2.0.3
Gnupg Gnupg	Version 2.0.4
Gnupg Gnupg	Version 2.0.5
Gnupg Gnupg	Version 2.0.6
Gnupg Gnupg	Version 2.0.7
Gnupg Gnupg	Version 2.0.8

Configuration E

8 vulnerable

Vulnerable Software	Affected Versions
Gnupg Libgcrypt	Up to 1.5.2
Gnupg Libgcrypt	Version 1.4.0
Gnupg Libgcrypt	Version 1.4.3
Gnupg Libgcrypt	Version 1.4.4
Gnupg Libgcrypt	Version 1.4.5
Gnupg Libgcrypt	Version 1.4.6
Gnupg Libgcrypt	Version 1.5.0
Gnupg Libgcrypt	Version 1.5.1