CVE-2015-0837

The mpi_powm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timing differences when…

published November 29, 2019

CVSS
—
EPSS
2%
Percentile
80.1
In the wild
Unconfirmed
What it is

The mpi_powm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timing differences when accessing a pre-computed table during modular exponentiation, related to a "Last-Level Cache Side-Channel Attack."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01952 · 80.1th percentile
Published
2019-11-29T21:10Z
EPSS history
Timeline
  • 29 NOV 21:10Z
    The mpi_powm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timing differences when…
    cvelistv5