VDB

GCVE-110-MAGEIA-2013-239

GCVE-110-MAGEIA-2013-239
Advisory Published
Vulnetix · Advisory published August 3, 2013
Yarom and Falkner discovered that RSA secret keys in applications using GnuPG 1.x, and using the libgcrypt library, could be leaked via a side channel attack, where a malicious local user could obtain private key information from another user on the system (CVE-2013-4242).

Affected Products

VendorProductVersionsPlatforms
Mageiagnupg0 (affected), 1.4.14-1.mga3 (unaffected)
Mageiagnupg0 (affected), 1.4.12-1.2.mga2 (unaffected)
Mageialibgcrypt1.5.3-1.mga3 (unaffected), 0 (affected)
Mageialibgcrypt0 (affected), 1.5.0-2.1.mga2 (unaffected)

Browse GCVE Records

71,925 records in the GCVE database · Updated July 13, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›