Lucene search

K
archlinuxArch LinuxASA-201608-18
HistoryAug 21, 2016 - 12:00 a.m.

libgcrypt: information disclosure

2016-08-2100:00:00
Arch Linux
lists.archlinux.org
36

EPSS

0.007

Percentile

80.6%

Felix Dörre and Vladimir Klebanov from the Karlsruhe Institute of
Technology found a bug in the mixing functions of Libgcrypt’s random
number generator: An attacker who obtains 4640 bits from the RNG can
trivially predict the next 160 bits of output. This bug exists since
1998 in all GnuPG and Libgcrypt versions.

OSVersionArchitecturePackageVersionFilename
anyanyanylibgcrypt< 1.7.3-1UNKNOWN