Lucene search
GoogleOSV:DSA-3649-1HistoryAug 17, 2016 - 12:00 a.m.
gnupg - security update
2016-08-1700:00:00
Google
osv.dev
10
0.007 Low
EPSS
Percentile
80.6%
Felix Doerre and Vladimir Klebanov from the Karlsruhe Institute of
Technology discovered a flaw in the mixing functions of GnuPG’s random
number generator. An attacker who obtains 4640 bits from the RNG can
trivially predict the next 160 bits of output.
A first analysis on the impact of this bug for GnuPG shows that existing
RSA keys are not weakened. For DSA and Elgamal keys it is also unlikely
that the private key can be predicted from other public information.
For the stable distribution (jessie), this problem has been fixed in
version 1.4.18-7+deb8u2.
We recommend that you upgrade your gnupg packages.
| CPE | Name | Operator | Version |
|---|---|---|---|
| gnupg | eq | 1.4.18-7 | |
| gnupg | eq | 1.4.18-7+deb8u1 |
References
Related
archlinux
archlinux
libgcrypt: information disclosure
2016-08-21 00:00:00
lib32-libgcrypt: information disclosure
2016-09-17 00:00:00
nessus
nessus
Debian DLA-600-1 : libgcrypt11 security update
2016-08-24 00:00:00
GLSA-201612-01 : GnuPG: RNG output is predictable
2016-12-05 00:00:00
Fedora 23 : gnupg (2016-3a0195918f)
2016-09-15 00:00:00
openvas
openvas
Fedora Update for gnupg FEDORA-2016-9864953aa3
2016-08-27 00:00:00
Debian: Security Advisory (DLA-602-1)
2023-03-08 00:00:00
Fedora Update for gnupg FEDORA-2016-aab0a156ab
2016-12-07 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package gnupg version 1.4.21-alt1
2017-03-28 00:00:00
alpinelinux
alpinelinux
CVE-2016-6313
2016-12-13 20:59:04
cve
cve
CVE-2016-6313
2016-12-13 20:59:04
ibm
ibm
Security Bulletin: IBM Flex System Manager (FSM) is affected by a libgcrypt vulnerability (CVE-2016-6313)
2018-06-18 01:34:54
Security Bulletin: Vulnerability in libgcrypt affects SmartCloud Entry (CVE-2016-6313 )
2020-07-19 00:49:12
Security Bulletin: A vulnerability in GnuPG (gpg) affects PowerKVM
2018-06-18 01:34:46
slackware
slackware
[slackware-security] gnupg
2016-08-23 20:58:51
[slackware-security] libgcrypt
2016-08-23 21:12:28
cvelist
cvelist
CVE-2016-6313
2016-12-13 20:00:00
gentoo
gentoo
GnuPG: RNG output is predictable
2016-12-02 00:00:00
libgcrypt: Multiple vulnerabilities
2016-10-10 00:00:00
fedora
fedora
[SECURITY] Fedora 25 Update: gnupg-1.4.21-1.fc25
2016-08-30 18:22:15
[SECURITY] Fedora 23 Update: gnupg-1.4.21-1.fc23
2016-09-14 01:23:53
[SECURITY] Fedora 24 Update: gnupg-1.4.21-1.fc24
2016-08-26 10:23:50
osv
osv
gnupg - security update
2016-08-29 00:00:00
CVE-2016-6313
2016-12-13 20:59:00
libgcrypt20 - security update
2016-08-17 00:00:00
veracode
veracode
Information Leakage
2019-01-15 09:14:36
debian
debian
[SECURITY] [DLA 600-1] libgcrypt11 security update
2016-08-23 19:52:26
[SECURITY] [DSA 3650-1] libgcrypt20 security update
2016-08-17 21:35:36
[SECURITY] [DLA 602-1] gnupg security and hardening update
2016-08-29 20:25:52
ubuntu
ubuntu
Libgcrypt vulnerability
2016-08-18 00:00:00
GnuPG vulnerability
2016-08-18 00:00:00
freebsd
freebsd
oraclelinux
oraclelinux
libgcrypt security update
2016-11-09 00:00:00
cloudfoundry
cloudfoundry
USN-3065-1 Libgcrypt vulnerability | Cloud Foundry
2016-08-25 00:00:00
USN-3064-1 GnuPG vulnerability | Cloud Foundry
2016-08-25 00:00:00
prion
prion
Design/Logic Flaw
2016-12-13 20:59:00
centos
centos
libgcrypt security update
2016-11-12 06:30:21
ubuntucve
ubuntucve
CVE-2016-6313
2016-08-17 00:00:00
CVE-2016-6316
2016-09-07 00:00:00
redhat
redhat
(RHSA-2016:2674) Moderate: libgcrypt security update
2016-11-08 03:29:18
f5
f5
K09040132 : libgcrypt vulnerability CVE-2016-6313
2017-07-03 00:00:00
nvd
nvd
CVE-2016-6313
2016-12-13 20:59:04
redhatcve
redhatcve
CVE-2016-6313
2016-08-18 21:04:33
amazon
amazon
Medium: libgcrypt, gnupg
2016-09-15 19:00:00
debiancve
debiancve
CVE-2016-6313
2016-12-13 20:59:04
mageia
mageia
Updated gnupg/libgcrypt packages fix security vulnerability
2016-08-31 18:32:33
photon
photon
suse
suse
Security update for SLES 12-SP1 Docker image (important)
2017-10-11 03:07:32
Security update for SLES 12 Docker image (important)
2017-10-11 03:06:53