{"id":"CVE-2015-0837","aliases":["DEBIAN-CVE-2015-0837","DLA-175-1","DLA-190-1","DSA-3184-1","DSA-3185-1","EUVD-2015-0850","GHSA-3ccv-3j4f-926q","MGASA-2015-0104","MGASA-2015-0360","SUSE-SU-2015:1511-1","SUSE-SU-2015:1626-1","UBUNTU-CVE-2015-0837","USN-2554-1","USN-2555-1","openSUSE-SU-2024:10037-1"],"status":"published","title":"The mpi_powm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to...","description":"The mpi_powm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timing differences when accessing a pre-computed table during modular exponentiation, related to a \"Last-Level Cache Side-Channel Attack.\"","severity":{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01952,"percentile":0.80381,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-203"],"published":"2015-03-02T00:00:00Z","modified":"2026-09-09T07:00:05Z","fixes":[{"ecosystem":"Debian:12","package":"libgcrypt20","fixed_in":["1.6.3-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libgcrypt20","fixed_in":["1.6.3-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libgcrypt20","fixed_in":["1.6.3-2"],"sources":["osv"]},{"ecosystem":"Mageia:4","package":"libgcrypt","fixed_in":["1.5.4-1.2.mga4"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"libgcrypt","fixed_in":["1.6.1-16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"libgcrypt","fixed_in":["1.6.1-16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12","package":"libgcrypt","fixed_in":["1.6.1-16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"libgcrypt","fixed_in":["1.6.1-16.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"gnupg","fixed_in":["1.4.16-1ubuntu2.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"libgcrypt11","fixed_in":["1.5.3-2ubuntu4.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"libgcrypt20","fixed_in":["1.6.1-2ubuntu1.14.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"libgcrypt20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.3-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libgcrypt20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.3-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libgcrypt20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.3-2"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"gnupg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.10-4+squeeze7"}]}],"versions":["1.4.10-4","1.4.10-4+squeeze1","1.4.10-4+squeeze2","1.4.10-4+squeeze3","1.4.10-4+squeeze4","1.4.10-4+squeeze5","1.4.10-4+squeeze6"],"bundled":3},{"source":"osv","ecosystem":"Debian:6.0","package":"libgcrypt11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.5-2+squeeze3"}]}],"versions":["1.4.5-2","1.4.5-2+squeeze1","1.4.5-2+squeeze2"],"bundled":2},{"source":"osv","ecosystem":"Debian:7","package":"gnupg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.12-7+deb7u7"}]}],"versions":["1.4.12-7","1.4.12-7+deb7u1","1.4.12-7+deb7u2","1.4.12-7+deb7u3","1.4.12-7+deb7u4","1.4.12-7+deb7u5","1.4.12-7+deb7u6"],"bundled":3},{"source":"osv","ecosystem":"Debian:7","package":"libgcrypt11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-5+deb7u3"}]}],"versions":["1.5.0-5","1.5.0-5+deb7u1","1.5.0-5+deb7u2"],"bundled":2},{"source":"osv","ecosystem":"Mageia:4","package":"gnupg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.16-1.2.mga4"}]}],"bundled":2},{"source":"osv","ecosystem":"Mageia:4","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-1.1.mga4"}]}],"bundled":2},{"source":"osv","ecosystem":"Mageia:4","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-1.2.mga4"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP3","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-0.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-0.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-0.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-0.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-0.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-0.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-0.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-0.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-0.19.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"gnupg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.16-1ubuntu2.3"}]}],"versions":["1.4.14-1ubuntu2","1.4.15-1.1ubuntu1","1.4.15-1.1ubuntu2","1.4.15-2ubuntu1","1.4.16-1ubuntu1","1.4.16-1ubuntu2","1.4.16-1ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libgcrypt11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.3-2ubuntu4.2"}]}],"versions":["1.5.0-3ubuntu3","1.5.3-2ubuntu1","1.5.3-2ubuntu4","1.5.3-2ubuntu4.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libgcrypt20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-2ubuntu1.14.04.1"}]}],"versions":["1.6.0-2","1.6.0-2ubuntu2","1.6.1-1","1.6.1-2","1.6.1-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"gnupg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.16-1ubuntu2.3"}]}],"versions":["1.4.14-1ubuntu2","1.4.15-1.1ubuntu1","1.4.15-1.1ubuntu2","1.4.15-2ubuntu1","1.4.16-1ubuntu1","1.4.16-1ubuntu2","1.4.16-1ubuntu2.1"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.22-3ubuntu1.3"}]}],"versions":["2.0.20-1ubuntu3","2.0.22-1ubuntu1","2.0.22-3ubuntu1","2.0.22-3ubuntu1.1"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libgcrypt11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.3-2ubuntu4.2"}]}],"versions":["1.5.0-3ubuntu3","1.5.3-2ubuntu1","1.5.3-2ubuntu4","1.5.3-2ubuntu4.1"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.3-1.3"}]}],"bundled":6}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"gnu","product":"gnupg"},{"vendor":"gnu","product":"libgcrypt"},{"vendor":"gnupg","product":"gnupg"},{"vendor":"gnupg","product":"libgcrypt"}],"references":[{"url":"http://www.debian.org/security/2015/dsa-3184","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3185","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.gnupg.org/pipermail/gnupg-announce/2015q1/000363.html","tags":["x_refsource_CONFIRM","x_transferred","Mailing List","Vendor Advisory","advisory","article","web"]},{"url":"https://lists.gnupg.org/pipermail/gnupg-announce/2015q1/000364.html","tags":["x_refsource_CONFIRM","x_transferred","Mailing List","Vendor Advisory","advisory","article"]},{"url":"https://ieeexplore.ieee.org/document/7163050","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0837"},{"url":"https://github.com/advisories/GHSA-3ccv-3j4f-926q"},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-0837","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2015-0104.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=15441","tags":["report"]},{"url":"https://lists.fedoraproject.org/pipermail/package-announce/2015-March/150931.html","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2015-0360.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=15610","tags":["report"]},{"url":"http://www.ubuntu.com/usn/usn-2555-1/","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151511-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/920057","tags":["report"]},{"url":"https://bugzilla.suse.com/938343","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0837","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151626-1/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3591","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2015-0837","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2554-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2555-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0837","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-3591","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-5270","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-1606","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-1607","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4242","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6313","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2015-0837","description":"The mpi_powm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timing differences when accessing a pre-computed table during modular exponentiation, related to a \"Last-Level Cache Side-Channel Attack.\"","status":"published","published":"2019-11-29T21:10:03Z","modified":"2024-08-06T04:26:11.067Z","updated_at":"2026-11-02T14:35:45.088047Z"}],"euvd":[{"id":"EUVD-2015-0850","description":"The mpi_powm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timing differences when accessing a pre-computed table during modular exponentiation, related to a \"Last-Level Cache Side-Channel Attack.\"","status":"published","published":"2019-11-29T21:10:03Z","modified":"2024-08-06T04:26:11Z","updated_at":"2026-11-03T02:22:18.008513Z"}],"ghsa":[{"id":"GHSA-3ccv-3j4f-926q","title":"The mpi_powm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to...","description":"The mpi_powm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timing differences when accessing a pre-computed table during modular exponentiation, related to a \"Last-Level Cache Side-Channel Attack.\"","status":"published","published":"2022-05-24T17:02:21Z","modified":"2024-04-04T02:41:21Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-203"],"updated_at":"2026-11-02T14:56:11.047077Z"}],"nvd":[{"id":"CVE-2015-0837","description":"The mpi_powm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timing differences when accessing a pre-computed table during modular exponentiation, related to a \"Last-Level Cache Side-Channel Attack.\"","status":"published","published":"2019-11-29T22:15:11.783Z","modified":"2026-06-17T00:21:00.53Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-203"],"updated_at":"2026-11-02T14:03:19.73542Z"}],"osv":[{"id":"CVE-2015-0837","description":"The mpi_powm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timing differences when accessing a pre-computed table during modular exponentiation, related to a \"Last-Level Cache Side-Channel Attack.\"","status":"published","published":"2019-11-29T22:15:11Z","modified":"2026-04-16T06:20:13.668255017Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:00.097545Z"},{"id":"DEBIAN-CVE-2015-0837","description":"The mpi_powm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timing differences when accessing a pre-computed table during modular exponentiation, related to a \"Last-Level Cache Side-Channel Attack.\"","status":"published","published":"2019-11-29T22:15:11.783Z","modified":"2026-09-09T07:00:05.407375418Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:26.442161Z"},{"id":"UBUNTU-CVE-2015-0837","description":"The mpi_powm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timing differences when accessing a pre-computed table during modular exponentiation, related to a \"Last-Level Cache Side-Channel Attack.\"","status":"published","published":"2015-03-02T00:00:00Z","modified":"2026-04-22T10:01:22.917151Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:09.721803Z"},{"id":"DLA-175-1","title":"gnupg - security update","status":"published","published":"2015-03-17T00:00:00Z","modified":"2026-03-09T01:18:18.863158Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"DLA-190-1","title":"libgcrypt11 - security update","status":"published","published":"2015-04-09T00:00:00Z","modified":"2026-03-09T01:18:28.336994Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DSA-3184-1","title":"gnupg - security update","status":"published","published":"2015-03-12T00:00:00Z","modified":"2026-03-09T01:19:53.787841Z","updated_at":"2026-11-02T15:46:15.843838Z"},{"id":"DSA-3185-1","title":"libgcrypt11 - security update","status":"published","published":"2015-03-12T00:00:00Z","modified":"2026-03-09T01:19:59.058518Z","updated_at":"2026-11-02T15:46:15.843838Z"},{"id":"MGASA-2015-0104","title":"Updated gnupg and libgcrypt packages fix security vulnerabilities","description":"GnuPG before 1.4.19 is vulnerable to a side-channel attack which can\npotentially lead to an information leak (CVE-2014-3591).\n\nGnuPG before 1.4.19 is vulnerable to a side-channel attack on data-dependent\ntiming variations in modular exponentiation, which can potentially lead to an\ninformation leak (CVE-2015-0837).\n\nThe gnupg package has been patched to correct these issues.\n\nGnuPG2 is vulnerable to these issues through the libgcrypt library.  The\nissues were fixed in libgcrypt 1.6.3.  The libgcrypt package in Mageia,\nat version 1.5.4, was only vulnerable to the CVE-2014-3591 issue.  It has\nalso been patched to correct this issue.\n","status":"published","published":"2015-03-10T16:48:25Z","modified":"2026-04-16T06:23:02.86310038Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"MGASA-2015-0360","title":"Updated libgcrypt packages fix CVE-2015-0837","description":"Updated libgcrypt packages fix security vulnerability:\n\nDaniel Genkin, Adi Shamir, and Eran Tromer discovered that Libgcrypt was\nsusceptible to an attack via physical side channels. A local attacker could\nuse this attack to possibly recover private keys (CVE-2015-0837).\n","status":"published","published":"2015-09-13T21:58:30Z","modified":"2026-04-16T06:25:10.1455809Z","updated_at":"2026-11-02T15:49:39.792687Z"},{"id":"openSUSE-SU-2024:10037-1","title":"libgcrypt-cavs-1.7.3-1.3 on GA media","description":"These are all security issues fixed in the libgcrypt-cavs-1.7.3-1.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:15:03.046041Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"SUSE-SU-2015:1511-1","title":"Security update for libgcrypt","description":"\nThis update fixes the following issues:\n\nSecurity:\n* Fixed data-dependent timing variations in modular exponentiation\n  [related to CVE-2015-0837, Last-Level Cache Side-Channel Attacks\n   are Practical] (bsc#920057)\n\nBugfixes:\n* don't drop privileges when locking secure memory (bsc#938343)\n","status":"published","published":"2015-08-17T09:36:36Z","modified":"2026-02-04T03:07:35.324295Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:1626-1","title":"Security update for libgcrypt","description":"\nThis update fixes the following issues:\n\n* Use ciphertext blinding for Elgamal decryption [CVE-2014-3591].\n  See http://www.cs.tau.ac.il/~tromer/radioexp/ for details.\n  (bsc#920057)\n* Fixed data-dependent timing variations in modular exponentiation\n  [related to CVE-2015-0837, Last-Level Cache Side-Channel Attacks\n  are Practical]\n","status":"published","published":"2015-08-17T08:27:45Z","modified":"2025-05-02T04:04:05.906382Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"USN-2554-1","title":"gnupg, gnupg2 vulnerabilities","description":"Daniel Genkin, Lev Pachmanov, Itamar Pipman, and Eran Tromer discovered\nthat GnuPG was susceptible to an attack via physical side channels. A local\nattacker could use this attack to possibly recover private keys.\n(CVE-2014-3591)\n\nDaniel Genkin, Adi Shamir, and Eran Tromer discovered that GnuPG was\nsusceptible to an attack via physical side channels. A local attacker could\nuse this attack to possibly recover private keys. (CVE-2015-0837)\n\nHanno Böck discovered that GnuPG incorrectly handled certain malformed\nkeyrings. If a user or automated system were tricked into opening a\nmalformed keyring, a remote attacker could use this issue to cause GnuPG to\ncrash, resulting in a denial of service, or possibly execute arbitrary\ncode. (CVE-2015-1606, CVE-2015-1607)\n\nIn addition, this update improves GnuPG security by validating that the\nkeys returned by keyservers match those requested.\n","status":"published","published":"2015-04-01T13:23:13Z","modified":"2026-02-10T04:40:53Z","updated_at":"2026-11-02T16:58:09.227524Z"},{"id":"USN-2555-1","title":"libgcrypt11, libgcrypt20 vulnerabilities","description":"Daniel Genkin, Lev Pachmanov, Itamar Pipman, and Eran Tromer discovered\nthat Libgcrypt was susceptible to an attack via physical side channels. A\nlocal attacker could use this attack to possibly recover private keys.\n(CVE-2014-3591)\n\nDaniel Genkin, Adi Shamir, and Eran Tromer discovered that Libgcrypt was\nsusceptible to an attack via physical side channels. A local attacker could\nuse this attack to possibly recover private keys. (CVE-2015-0837)\n","status":"published","published":"2015-04-01T13:28:51Z","modified":"2026-04-22T09:10:39.290222Z","updated_at":"2026-11-02T16:58:09.227524Z"}]}}