oval:org.mitre.oval:def:23305
| Definition Id: oval:org.mitre.oval:def:23305 | |||
| Oval ID: | oval:org.mitre.oval:def:23305 | ||
| Title: | ELSA-2014:0016: gnupg security update (Moderate) | ||
| Description: | GnuPG 1.x before 1.4.16 generates RSA keys using sequences of introductions with certain patterns that introduce a side channel, which allows physically proximate attackers to extract RSA keys via a chosen-ciphertext attack and acoustic cryptanalysis during decryption. NOTE: applications are not typically expected to protect themselves from acoustic side-channel attacks, since this is arguably the responsibility of the physical device. Accordingly, issues of this type would not normally receive a CVE identifier. However, for this issue, the developer has specified a security policy in which GnuPG should offer side-channel resistance, and developer-specified security-policy violations are within the scope of CVE. | ||
| Family: | unix | Class: | patch |
| Reference(s): | ELSA-2014:0016-00 CVE-2013-4576 | Version: | 6 |
| Platform(s): | Oracle Linux 5 | Product(s): | gnupg |
| Definition Synopsis: | |||
| Definition Id: oval:org.mitre.oval:def:15459 | |||
| Oval ID: | oval:org.mitre.oval:def:15459 | ||
| Title: | Oracle Linux 5.x | ||
| Description: | The operating system installed on the system is Oracle Linux 5.x | ||
| Family: | unix | Class: | inventory |
| Reference(s): | cpe:/o:oracle:linux:5 | Version: | 7 |
| Platform(s): | Oracle Linux 5 | Product(s): | |
| Definition Synopsis: | |||
| Referenced By: | |||
| oval:org.mitre.oval:def:23305 | |||
