View at Official ubuntu advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2015-0837 low priority: Ubuntu including 3 source packages (gnupg, libgcrypt11, libgcrypt20), 15 status rows across 5 suites (lucid, precise, trusty, upstream, utopic): released 12, DNE 2, needed 1.
The mpi_powm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timing differences when accessing a pre-computed table during modular exponentiation, related to a "Last-Level Cache Side-Channel Attack."