cvelist/2013/4xxx/CVE-2013-4242.json

137 lines
4.6 KiB
JSON
Raw Normal View History

2017-10-16 12:31:07 -04:00
{
2019-03-17 21:46:41 +00:00
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2013-4242",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
2017-10-16 12:31:07 -04:00
]
2019-03-17 21:46:41 +00:00
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "GnuPG before 1.4.14, and Libgcrypt before 1.5.3 as used in GnuPG 2.0.x and possibly other products, allows local users to obtain private RSA keys via a cache side-channel attack involving the L3 cache, aka Flush+Reload."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html",
"refsource": "CONFIRM",
"url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
},
{
"name": "DSA-2731",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2013/dsa-2731"
},
{
"name": "54332",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/54332"
},
{
"name": "54321",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/54321"
},
{
"name": "54375",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/54375"
},
{
"name": "openSUSE-SU-2013:1294",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-updates/2013-08/msg00003.html"
},
{
"name": "61464",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/61464"
},
{
"name": "USN-1923-1",
"refsource": "UBUNTU",
"url": "http://www.ubuntu.com/usn/USN-1923-1"
},
{
"name": "http://eprint.iacr.org/2013/448",
"refsource": "MISC",
"url": "http://eprint.iacr.org/2013/448"
},
{
"name": "[gnupg-announce] 20130725 [Announce] [security fix] GnuPG 1.4.14 released",
"refsource": "MLIST",
"url": "http://lists.gnupg.org/pipermail/gnupg-announce/2013q3/000330.html"
},
{
"name": "VU#976534",
"refsource": "CERT-VN",
"url": "http://www.kb.cert.org/vuls/id/976534"
},
{
"name": "DSA-2730",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2013/dsa-2730"
},
{
"name": "RHSA-2013:1457",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2013-1457.html"
},
{
"name": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=717880",
"refsource": "MISC",
"url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=717880"
},
{
"name": "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705",
"refsource": "CONFIRM",
"url": "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705"
},
{
"name": "54318",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/54318"
}
]
}
}