CVE-2015-0837

The mpi_powm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timing differences when accessing a pre-computed table during modular exponentiation, related to a "Last-Level Cache Side-Channel Attack."

• CWE-203

• http://www.debian.org/security/2015/dsa-3184Third Party Advisory
• http://www.debian.org/security/2015/dsa-3185Third Party Advisory
• https://ieeexplore.ieee.org/document/7163050Third Party Advisory
• https://lists.gnupg.org/pipermail/gnupg-announce/2015q1/000363.htmlMailing List, Vendor Advisory
• https://lists.gnupg.org/pipermail/gnupg-announce/2015q1/000364.htmlMailing List, Vendor Advisory
• http://www.debian.org/security/2015/dsa-3184Third Party Advisory
• http://www.debian.org/security/2015/dsa-3185Third Party Advisory
• https://ieeexplore.ieee.org/document/7163050Third Party Advisory
• https://lists.gnupg.org/pipermail/gnupg-announce/2015q1/000363.htmlMailing List, Vendor Advisory
• https://lists.gnupg.org/pipermail/gnupg-announce/2015q1/000364.htmlMailing List, Vendor Advisory

Published

Nov 29, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-0831Use-after-free vulnerability in the mozilla::dom::IndexedDB:…
• CVE-2015-0832Mozilla Firefox before 36.0 does not properly recognize the …
• CVE-2015-0833Multiple untrusted search path vulnerabilities in updater.ex…
• CVE-2015-0834The WebRTC subsystem in Mozilla Firefox before 36.0 recogniz…
• CVE-2015-0835Multiple unspecified vulnerabilities in the browser engine i…
• CVE-2015-0836Multiple unspecified vulnerabilities in the browser engine i…
• CVE-2015-0838Buffer overflow in the C implementation of the apply_delta f…
• CVE-2015-0839The hp-plugin utility in HP Linux Imaging and Printing (HPLI…
• CVE-2015-0840The dpkg-source command in Debian dpkg before 1.16.16 and 1.…
• CVE-2015-0841Off-by-one error in the readBuf function in listener.cpp in …7.5
• CVE-2015-0842yubiserver before 0.6 is prone to SQL injection issues, pote…9.8
• CVE-2015-0843yubiserver before 0.6 is prone to buffer overflows due to mi…9.8