1.9 - CVE-2013-4242

Executive Summary

Informations
Name	CVE-2013-4242	First vendor Publication	2013-08-19
Vendor	Cve	Last vendor Modification	2024-11-21

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:L/AC:M/Au:N/C:P/I:N/A:N)
Cvss Base Score	1.9	Attack Range	Local
Cvss Impact Score	2.9	Attack Complexity	Medium
Cvss Expoit Score	3.4	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

GnuPG before 1.4.14, and Libgcrypt before 1.5.3 as used in GnuPG 2.0.x and possibly other products, allows local users to obtain private RSA keys via a cache side-channel attack involving the L3 cache, aka Flush+Reload.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4242

CWE : Common Weakness Enumeration

%	Id	Name
100 %	CWE-200	Information Exposure

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:17876

Oval ID:	oval:org.mitre.oval:def:17876
Title:	USN-1923-1 -- gnupg, libgcrypt11 vulnerability
Description:	GnuPG and Libgcrypt could be made to expose sensitive information.
Family:	unix	Class:	patch
Reference(s):	USN-1923-1 CVE-2013-4242	Version:	7
Platform(s):	Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04	Product(s):	gnupg libgcrypt11
Definition Synopsis:
Release section Ubuntu 13.04 is installed Packages match section gnupg DPKG is earlier than 1.4.12-7ubuntu1.1 AND libgcrypt11 DPKG is earlier than 1.5.0-3ubuntu2.2 AND Release section Ubuntu 12.10 is installed Packages match section gnupg DPKG is earlier than 1.4.11-3ubuntu4.2 AND libgcrypt11 DPKG is earlier than 1.5.0-3ubuntu1.1 AND Release section Ubuntu 12.04 is installed Packages match section gnupg DPKG is earlier than 1.4.11-3ubuntu2.3 AND libgcrypt11 DPKG is earlier than 1.5.0-3ubuntu0.2 AND Release section Ubuntu 10.04 is installed Packages match section gnupg DPKG is earlier than 1.4.10-2ubuntu1.3 AND libgcrypt11 DPKG is earlier than 1.4.4-5ubuntu2.2

Definition Id: oval:org.mitre.oval:def:18882

Oval ID:	oval:org.mitre.oval:def:18882
Title:	DSA-2730-1 gnupg - information leak
Description:	Yarom and Falkner discovered that RSA secret keys could be leaked via a side channel attack, where a malicious local user could obtain private key information from another user on the system.
Family:	unix	Class:	patch
Reference(s):	DSA-2730-1 CVE-2013-4242	Version:	8
Platform(s):	Debian GNU/Linux 6.0 Debian GNU/Linux 7 Debian GNU/kFreeBSD 6.0 Debian GNU/kFreeBSD 7	Product(s):	gnupg
Definition Synopsis:
Release section Debian 6.0 is installed GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND gnupg DPKG is earlier than 1.4.10-4+squeeze2 AND Release section Debian 7 is installed GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND gnupg DPKG is earlier than 1.4.12-7+deb7u1

Definition Id: oval:org.mitre.oval:def:18887

Oval ID:	oval:org.mitre.oval:def:18887
Title:	DSA-2731-1 libgcrypt11 - information leak
Description:	Yarom and Falkner discovered that RSA secret keys in applications using the libgcrypt11 library, for example GnuPG 2.x, could be leaked via a side channel attack, where a malicious local user could obtain private key information from another user on the system.
Family:	unix	Class:	patch
Reference(s):	DSA-2731-1 CVE-2013-4242	Version:	8
Platform(s):	Debian GNU/Linux 6.0 Debian GNU/Linux 7 Debian GNU/kFreeBSD 6.0 Debian GNU/kFreeBSD 7	Product(s):	libgcrypt11
Definition Synopsis:
Release section Debian 6.0 is installed GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND libgcrypt11 DPKG is earlier than 1.4.5-2+squeeze1 AND Release section Debian 7 is installed GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND libgcrypt11 DPKG is earlier than 1.5.0-5+deb7u1

Definition Id: oval:org.mitre.oval:def:21277

Oval ID:	oval:org.mitre.oval:def:21277
Title:	RHSA-2013:1457: libgcrypt security update (Moderate)
Description:	GnuPG before 1.4.14, and Libgcrypt before 1.5.3 as used in GnuPG 2.0.x and possibly other products, allows local users to obtain private RSA keys via a cache side-channel attack involving the L3 cache, aka Flush+Reload.
Family:	unix	Class:	patch
Reference(s):	RHSA-2013:1457-00 CESA-2013:1457 CVE-2013-4242	Version:	4
Platform(s):	Red Hat Enterprise Linux 5 Red Hat Enterprise Linux 6 CentOS Linux 5 CentOS Linux 6	Product(s):	libgcrypt
Definition Synopsis:
Operation system section Redhat 6 or Centos 6 release The operating system installed on the system is Red Hat Enterprise Linux 6 AND CentOS Linux 6.x Packages section libgcrypt-devel is earlier than 0:1.4.5-11.el6_4 AND libgcrypt is earlier than 0:1.4.5-11.el6_4 AND Operation system section Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x Packages section libgcrypt-devel is earlier than 0:1.4.4-7.el5_10 AND libgcrypt is earlier than 0:1.4.4-7.el5_10

Definition Id: oval:org.mitre.oval:def:23444

Oval ID:	oval:org.mitre.oval:def:23444
Title:	DEPRECATED: ELSA-2013:1457: libgcrypt security update (Moderate)
Description:	GnuPG before 1.4.14, and Libgcrypt before 1.5.3 as used in GnuPG 2.0.x and possibly other products, allows local users to obtain private RSA keys via a cache side-channel attack involving the L3 cache, aka Flush+Reload.
Family:	unix	Class:	patch
Reference(s):	ELSA-2013:1457-00 CVE-2013-4242	Version:	7
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	libgcrypt
Definition Synopsis:
rpm test Oracle Linux 6.x AND rpm test libgcrypt-devel is earlier than 0:1.4.5-11.el6_4 AND libgcrypt is earlier than 0:1.4.5-11.el6_4 OR rpm test Oracle Linux 5.x AND rpm test libgcrypt-devel is earlier than 0:1.4.4-7.el5_10 AND libgcrypt is earlier than 0:1.4.4-7.el5_10

Definition Id: oval:org.mitre.oval:def:24005

Oval ID:	oval:org.mitre.oval:def:24005
Title:	ELSA-2013:1457: libgcrypt security update (Moderate)
Description:	GnuPG before 1.4.14, and Libgcrypt before 1.5.3 as used in GnuPG 2.0.x and possibly other products, allows local users to obtain private RSA keys via a cache side-channel attack involving the L3 cache, aka Flush+Reload.
Family:	unix	Class:	patch
Reference(s):	ELSA-2013:1457-00 CVE-2013-4242	Version:	6
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	libgcrypt
Definition Synopsis:
rpm test Oracle Linux 6.x AND rpm test libgcrypt-devel is earlier than 0:1.4.5-11.el6_4 AND libgcrypt is earlier than 0:1.4.5-11.el6_4 OR rpm test Oracle Linux 5.x AND rpm test libgcrypt-devel is earlier than 0:1.4.4-7.el5_10 AND libgcrypt is earlier than 0:1.4.4-7.el5_10

Definition Id: oval:org.mitre.oval:def:25331

Oval ID:	oval:org.mitre.oval:def:25331
Title:	SUSE-SU-2014:0704-1 -- Security update for libgcrypt
Description:	libgcrypt has been updated to fix a cryptographic weakness. * CVE-2013-4242: libgcrypt was affected by the Yarom/Falkner flush+reload side-channel attach on RSA secret keys, that could have potentially leaked the key data to attackers on the same machine.
Family:	unix	Class:	patch
Reference(s):	SUSE-SU-2014:0704-1 CVE-2013-4242	Version:	3
Platform(s):	SUSE Linux Enterprise Server 11	Product(s):	libgcrypt
Definition Synopsis:
SUSE Linux Enterprise Server 11.x is installed Packages match section libgcrypt11 RPM is earlier than 0:1.4.1-6.10.1 AND libgcrypt11-32bit RPM is earlier than 0:1.4.1-6.10.1

Definition Id: oval:org.mitre.oval:def:25485

Oval ID:	oval:org.mitre.oval:def:25485
Title:	SUSE-SU-2013:1352-1 -- Security update for libgcrypt
Description:	This update of libgcrypt mitigates the Yarom/Falkner flush+reload side-channel attack on RSA secret keys (CVE-2013-4242). Security Issue reference: * CVE-2013-4242 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4242 >
Family:	unix	Class:	patch
Reference(s):	SUSE-SU-2013:1352-1 CVE-2013-4242	Version:	3
Platform(s):	SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Desktop 11	Product(s):	libgcrypt
Definition Synopsis:
Operation system section SUSE Linux Enterprise Server 11.x is installed AND SUSE Linux Enterprise Desktop 11.x is installed Packages match section libgcrypt11 RPM is earlier than 0:1.5.0-0.15.2 AND libgcrypt11-32bit RPM is earlier than 0:1.5.0-0.15.2

Definition Id: oval:org.mitre.oval:def:27177

Oval ID:	oval:org.mitre.oval:def:27177
Title:	DEPRECATED: ELSA-2013-1457 -- libgcrypt security update (moderate)
Description:	[1.4.5-11] - fix CVE-2013-4242 GnuPG/libgcrypt susceptible to cache side-channel attack [1.4.5-10] - Add GCRYCTL_SET_ENFORCED_FIPS_FLAG command
Family:	unix	Class:	patch
Reference(s):	ELSA-2013-1457 CVE-2013-4242	Version:	4
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	libgcrypt
Definition Synopsis:
Oracle Linux 5 release section Oracle Linux 5.x Packages match section libgcrypt is earlier than 0:1.4.4-7.el5_10 AND libgcrypt-devel is earlier than 0:1.4.4-7.el5_10 AND Oracle Linux 6 release section Oracle Linux 6.x Packages match section libgcrypt is earlier than 0:1.4.5-11.el6_4 AND libgcrypt-devel is earlier than 0:1.4.5-11.el6_4

CPE : Common Platform Enumeration

Type	Description	Count
Application	Gnupg cpe:2.3:a:gnupg:gnupg:2.0.8:::::::* cpe:2.3:a:gnupg:gnupg:2.0.7:::::::* cpe:2.3:a:gnupg:gnupg:2.0.6:::::::* cpe:2.3:a:gnupg:gnupg:2.0.5:::::::* cpe:2.3:a:gnupg:gnupg:2.0.4:::::::* cpe:2.3:a:gnupg:gnupg:2.0.3:::::::* cpe:2.3:a:gnupg:gnupg:2.0.19:::::::* cpe:2.3:a:gnupg:gnupg:2.0.18:::::::* cpe:2.3:a:gnupg:gnupg:2.0.17:::::::* cpe:2.3:a:gnupg:gnupg:2.0.16:::::::* cpe:2.3:a:gnupg:gnupg:2.0.15:::::::* cpe:2.3:a:gnupg:gnupg:2.0.14:::::::* cpe:2.3:a:gnupg:gnupg:2.0.13:::::::* cpe:2.3:a:gnupg:gnupg:2.0.12:::::::* cpe:2.3:a:gnupg:gnupg:2.0.11:::::::* cpe:2.3:a:gnupg:gnupg:2.0.10:::::::* cpe:2.3:a:gnupg:gnupg:2.0.1:::::::* cpe:2.3:a:gnupg:gnupg:1.4.8:::::::* cpe:2.3:a:gnupg:gnupg:1.4.6:::::::* cpe:2.3:a:gnupg:gnupg:1.4.5:::::::* cpe:2.3:a:gnupg:gnupg:1.4.4:::::::* cpe:2.3:a:gnupg:gnupg:1.4.3:::::::* cpe:2.3:a:gnupg:gnupg:1.4.2:::::::* cpe:2.3:a:gnupg:gnupg:1.4.13:::::::* cpe:2.3:a:gnupg:gnupg:1.4.12:::::::* cpe:2.3:a:gnupg:gnupg:1.4.11:::::::* cpe:2.3:a:gnupg:gnupg:1.4.10:::::::* cpe:2.3:a:gnupg:gnupg:1.4.0:::::::* cpe:2.3:a:gnupg:gnupg:1.4:::::::* cpe:2.3:a:gnupg:gnupg:1.3.93:::::::* cpe:2.3:a:gnupg:gnupg:1.3.92:::::::* cpe:2.3:a:gnupg:gnupg:1.3.91:::::::* cpe:2.3:a:gnupg:gnupg:1.3.90:::::::* cpe:2.3:a:gnupg:gnupg:1.3.6:::::::* cpe:2.3:a:gnupg:gnupg:1.3.4:::::::* cpe:2.3:a:gnupg:gnupg:1.3.3:::::::* cpe:2.3:a:gnupg:gnupg:1.3.2:::::::* cpe:2.3:a:gnupg:gnupg:1.3.1:::::::* cpe:2.3:a:gnupg:gnupg:1.3.0:::::::* cpe:2.3:a:gnupg:gnupg:1.2.7:::::::* cpe:2.3:a:gnupg:gnupg:1.2.6:::::::* cpe:2.3:a:gnupg:gnupg:1.2.5:::::::* cpe:2.3:a:gnupg:gnupg:1.2.4:::::::* cpe:2.3:a:gnupg:gnupg:1.2.3:::::::* cpe:2.3:a:gnupg:gnupg:1.2.2:::::::* cpe:2.3:a:gnupg:gnupg:1.2.1:::::::* cpe:2.3:a:gnupg:gnupg:1.2.1:windows:::::: cpe:2.3:a:gnupg:gnupg:1.2.0:::::::* cpe:2.3:a:gnupg:gnupg:1.0.7:::::::* cpe:2.3:a:gnupg:gnupg:1.0.6:::::::* cpe:2.3:a:gnupg:gnupg:1.0.5:::::::* cpe:2.3:a:gnupg:gnupg:1.0.5:-:win32:::::* cpe:2.3:a:gnupg:gnupg:1.0.4:-:win32:::::* cpe:2.3:a:gnupg:gnupg:1.0.4:::::::* cpe:2.3:a:gnupg:gnupg:1.0.3:::::::* cpe:2.3:a:gnupg:gnupg:1.0.2:::::::* cpe:2.3:a:gnupg:gnupg:1.0.1:::::::* cpe:2.3:a:gnupg:gnupg:1.0.0:::::::* cpe:2.3:a:gnupg:gnupg:0.9.9:::::::* cpe:2.3:a:gnupg:gnupg:0.9.8:::::::* cpe:2.3:a:gnupg:gnupg:0.9.7:::::::* cpe:2.3:a:gnupg:gnupg:0.9.6:::::::* cpe:2.3:a:gnupg:gnupg:0.9.5:::::::* cpe:2.3:a:gnupg:gnupg:0.9.4:::::::* cpe:2.3:a:gnupg:gnupg:0.9.3:::::::* cpe:2.3:a:gnupg:gnupg:0.9.2:::::::* cpe:2.3:a:gnupg:gnupg:0.9.11:::::::* cpe:2.3:a:gnupg:gnupg:0.9.10:::::::* cpe:2.3:a:gnupg:gnupg:0.9.1:::::::* cpe:2.3:a:gnupg:gnupg:0.9.0:::::::* cpe:2.3:a:gnupg:gnupg:0.4.5:::::::* cpe:2.3:a:gnupg:gnupg:0.4.4:::::::* cpe:2.3:a:gnupg:gnupg:0.4.3:::::::* cpe:2.3:a:gnupg:gnupg:0.4.1:::::::* cpe:2.3:a:gnupg:gnupg:0.4.0:::::::* cpe:2.3:a:gnupg:gnupg:0.3.5:::::::* cpe:2.3:a:gnupg:gnupg:0.3.4:::::::* cpe:2.3:a:gnupg:gnupg:0.3.3:::::::* cpe:2.3:a:gnupg:gnupg:0.3.2:::::::* cpe:2.3:a:gnupg:gnupg:0.3.1:::::::* cpe:2.3:a:gnupg:gnupg:0.3.0:::::::* cpe:2.3:a:gnupg:gnupg:0.2.19:::::::* cpe:2.3:a:gnupg:gnupg:0.2.18:::::::* cpe:2.3:a:gnupg:gnupg:0.2.17:::::::* cpe:2.3:a:gnupg:gnupg:0.2.16:::::::* cpe:2.3:a:gnupg:gnupg:0.2.15:::::::* cpe:2.3:a:gnupg:gnupg:0.0.0:-:::::: cpe:2.3:a:gnupg:gnupg:::::::: cpe:2.3:a:gnupg:gnupg:::::lts:::* cpe:2.3:a:gnupg:gnupg:::::-:::* cpe:2.3:a:gnupg:gnupg:-:::::::*	91
Application	Gnupg Libgcrypt cpe:2.3:a:gnupg:libgcrypt:1.5.2:::::::* cpe:2.3:a:gnupg:libgcrypt:1.5.1:::::::* cpe:2.3:a:gnupg:libgcrypt:1.5.0:::::::* cpe:2.3:a:gnupg:libgcrypt:1.4.6:::::::* cpe:2.3:a:gnupg:libgcrypt:1.4.5:::::::* cpe:2.3:a:gnupg:libgcrypt:1.4.4:::::::* cpe:2.3:a:gnupg:libgcrypt:1.4.3:::::::* cpe:2.3:a:gnupg:libgcrypt:1.4.0:::::::* cpe:2.3:a:gnupg:libgcrypt::::::::	9
Os	Canonical Ubuntu Linux cpe:2.3:o:canonical:ubuntu_linux:13.04:::::::* cpe:2.3:o:canonical:ubuntu_linux:12.10:::::::* cpe:2.3:o:canonical:ubuntu_linux:12.04:-:lts:::::* cpe:2.3:o:canonical:ubuntu_linux:10.04:-:lts:::::*	4
Os	Debian Debian Linux cpe:2.3:o:debian:debian_linux:7.0:::::::* cpe:2.3:o:debian:debian_linux:6.0:::::::*	2
Os	Opensuse cpe:2.3:o:opensuse:opensuse:12.3:::::::* cpe:2.3:o:opensuse:opensuse:12.2:::::::*	2

Information Assurance Vulnerability Management (IAVM)

Date	Description
2014-05-01	IAVM : 2014-A-0062 - Multiple Vulnerabilities In McAfee Email Gateway Severity : Category I - VMSKEY : V0050005

Nessus® Vulnerability Scanner

Date	Description
2016-06-22	Name : The remote OracleVM host is missing a security update. File : oraclevm_OVMSA-2016-0062.nasl - Type : ACT_GATHER_INFO
2016-02-22	Name : The remote device is missing a vendor-supplied security patch. File : f5_bigip_SOL75253136.nasl - Type : ACT_GATHER_INFO
2015-01-19	Name : The remote Solaris system is missing a security patch for third-party software. File : solaris11_libgcrypt_20140512.nasl - Type : ACT_GATHER_INFO
2014-11-08	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2013-1527.nasl - Type : ACT_GATHER_INFO
2014-06-10	Name : The remote Fedora host is missing a security update. File : fedora_2014-6851.nasl - Type : ACT_GATHER_INFO
2014-02-23	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201402-24.nasl - Type : ACT_GATHER_INFO
2013-10-27	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2013-1457.nasl - Type : ACT_GATHER_INFO
2013-10-27	Name : The remote CentOS host is missing a security update. File : centos_RHSA-2013-1458.nasl - Type : ACT_GATHER_INFO
2013-10-25	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2013-1457.nasl - Type : ACT_GATHER_INFO
2013-10-25	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20131024_libgcrypt_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2013-10-25	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20131024_gnupg_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2013-10-25	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2013-1458.nasl - Type : ACT_GATHER_INFO
2013-10-25	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2013-1457.nasl - Type : ACT_GATHER_INFO
2013-10-25	Name : The remote Oracle Linux host is missing a security update. File : oraclelinux_ELSA-2013-1458.nasl - Type : ACT_GATHER_INFO
2013-10-01	Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2013-226.nasl - Type : ACT_GATHER_INFO
2013-10-01	Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2013-225.nasl - Type : ACT_GATHER_INFO
2013-08-20	Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_689c2bf7070111e39a25002590860428.nasl - Type : ACT_GATHER_INFO
2013-08-16	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_libgcrypt-130813.nasl - Type : ACT_GATHER_INFO
2013-08-15	Name : The remote Fedora host is missing a security update. File : fedora_2013-13940.nasl - Type : ACT_GATHER_INFO
2013-08-10	Name : The remote Fedora host is missing a security update. File : fedora_2013-13975.nasl - Type : ACT_GATHER_INFO
2013-08-05	Name : The remote Slackware host is missing a security update. File : Slackware_SSA_2013-215-01.nasl - Type : ACT_GATHER_INFO
2013-08-02	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2013-205.nasl - Type : ACT_GATHER_INFO
2013-08-02	Name : The remote Fedora host is missing a security update. File : fedora_2013-13678.nasl - Type : ACT_GATHER_INFO
2013-08-02	Name : The remote Fedora host is missing a security update. File : fedora_2013-13671.nasl - Type : ACT_GATHER_INFO
2013-08-01	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1923-1.nasl - Type : ACT_GATHER_INFO
2013-07-30	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2731.nasl - Type : ACT_GATHER_INFO
2013-07-30	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2730.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=717880
http://eprint.iacr.org/2013/448
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
http://lists.gnupg.org/pipermail/gnupg-announce/2013q3/000330.html
http://lists.opensuse.org/opensuse-updates/2013-08/msg00003.html
http://rhn.redhat.com/errata/RHSA-2013-1457.html
http://secunia.com/advisories/54318
http://secunia.com/advisories/54321
http://secunia.com/advisories/54332
http://secunia.com/advisories/54375
http://www.debian.org/security/2013/dsa-2730
http://www.debian.org/security/2013/dsa-2731
http://www.kb.cert.org/vuls/id/976534
http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546....
http://www.securityfocus.com/bid/61464
http://www.ubuntu.com/usn/USN-1923-1

Source	Url

Alert History

If you want to see full details history, please login or register.

Date	Informations
2024-11-28 12:36:14	Multiple Updates
2023-03-28 12:07:08	Multiple Updates
2021-05-05 01:13:17	Multiple Updates
2021-05-04 12:27:10	Multiple Updates
2021-04-22 01:32:52	Multiple Updates
2020-05-24 01:12:00	Multiple Updates
2020-05-23 00:37:55	Multiple Updates
2019-01-03 12:02:13	Multiple Updates
2018-10-31 00:20:33	Multiple Updates
2018-08-14 12:05:26	Multiple Updates
2018-08-10 12:03:52	Multiple Updates
2018-01-26 12:04:58	Multiple Updates
2016-12-08 09:23:28	Multiple Updates
2016-09-09 09:23:16	Multiple Updates
2016-06-28 19:38:51	Multiple Updates
2016-06-23 13:29:27	Multiple Updates
2016-04-26 23:31:28	Multiple Updates
2016-02-23 13:26:54	Multiple Updates
2015-01-21 13:26:19	Multiple Updates
2014-11-08 13:31:05	Multiple Updates
2014-06-11 13:24:24	Multiple Updates
2014-05-02 17:20:39	Multiple Updates
2014-04-17 13:25:38	Multiple Updates
2014-02-23 13:21:07	Multiple Updates
2014-02-17 11:21:51	Multiple Updates
2013-10-31 13:20:36	Multiple Updates
2013-10-25 21:20:11	Multiple Updates
2013-10-23 21:19:59	Multiple Updates
2013-10-11 13:27:03	Multiple Updates
2013-10-08 00:20:00	Multiple Updates
2013-08-21 00:19:15	Multiple Updates
2013-08-20 17:22:58	First insertion

Global Informations

Type	Count
CWE ID(s)	1
Oval ID(s)	9
CPE ID(s)	108
Sources(s)	16
IAVM(s)	1
Nessus® Exploit(s)	27

	Related
5.8	RHSA-2013:1458
5.8	GLSA-201402-24
1.9	VU#976534
1.9	USN-1923-1
1.9	RHSA-2013:1457
1.9	MDVSA-2013:205
1.9	DSA-2731
1.9	DSA-2730
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 8 more Alert(s)

1.9 - CVE-2013-4242

Executive Summary

Security-Database Scoring CVSS v3

Security-Database Scoring CVSS v2

Detail

Original Source

CWE : Common Weakness Enumeration

OVAL Definitions

CPE : Common Platform Enumeration

Information Assurance Vulnerability Management (IAVM)

Nessus® Vulnerability Scanner

Sources (Detail)

Alert History

Global Informations

Open Standards

Other Databases

COMPANY

STANDARDS

RECENT POSTS

MENU