| Package | Affected versions | Patched versions |
|---|---|---|
| gnupg | < 1.4.19 | 1.4.19 |
| libgcrypt | < 1.6.3 | 1.6.3 |
The mpi_powm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timing differences when accessing a pre-computed table during modular exponentiation, related to a "Last-Level Cache Side-Channel Attack."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free