CVE-2015-0837: vulnerability in GNU Libgcrypt
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
A timing vulnerability in the mpi_powm function allows attackers to infer sensitive cryptographic keys by measuring how long certain operations take. This side-channel attack exploits differences in CPU cache access patterns during encryption operations.
The mpi_powm function in Libgcrypt <1.6.3 and GnuPG <1.4.19 is vulnerable to a Last-Level Cache (LLC) side-channel attack during modular exponentiation. An attacker with local access to measure memory access timings can infer private key bits through cache hit/miss patterns when accessing pre-computed lookup tables. The vulnerability affects RSA and other operations relying on this function.
In the same product, most dangerous first.