cve/2013/CVE-2013-4242.md

CVE-2013-4242

Description

GnuPG before 1.4.14, and Libgcrypt before 1.5.3 as used in GnuPG 2.0.x and possibly other products, allows local users to obtain private RSA keys via a cache side-channel attack involving the L3 cache, aka Flush+Reload.

POC

Reference

• http://www.kb.cert.org/vuls/id/976534
• http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html

Github

No PoCs found on GitHub currently.