CVE-2014-5270 | BDVDB-2026-64798 Detail

Description#

Libgcrypt before 1.5.4, as used in GnuPG and other products, does not properly perform ciphertext normalization and ciphertext randomization, which makes it easier for physically proximate attackers to conduct key-extraction attacks by leveraging the ability to collect voltage data from exposed metal, a different vector than CVE-2013-4576.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12014-10-10Record published in the CVE List.
2. Version 22024-08-06Most recent update recorded in the CVE List.