Loading HuntDB...

GHSA-3ccv-3j4f-926q

GitHub Security Advisory

⚠ Unreviewed MODERATE Has CVE

Advisory Details

The mpi_powm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timing differences when accessing a pre-computed table during modular exponentiation, related to a "Last-Level Cache Side-Channel Attack."

Related CVEs

Key Information

GHSA ID
GHSA-3ccv-3j4f-926q
Published
May 24, 2022 5:02 PM
Last Modified
April 4, 2024 2:41 AM
CVSS Score
5.0 /10
Primary Ecosystem
Unknown
Primary Package
Unknown
GitHub Reviewed
✗ No

Dataset

Last updated: August 13, 2025 6:30 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.