Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2016:2674
HistoryNov 08, 2016 - 3:29 a.m.

(RHSA-2016:2674) Moderate: libgcrypt security update

2016-11-0803:29:18
access.redhat.com
49

0.007 Low

EPSS

Percentile

80.6%

JSON

The libgcrypt library provides general-purpose implementations of various cryptographic algorithms.

Security Fix(es):

  • A design flaw was found in the libgcrypt PRNG (Pseudo-Random Number Generator). An attacker able to obtain the first 580 bytes of the PRNG output could predict the following 20 bytes. (CVE-2016-6313)

Red Hat would like to thank Felix Dörre and Vladimir Klebanov for reporting this issue.

OSVersionArchitecturePackageVersionFilename
RedHat7i686libgcrypt-debuginfo< 1.5.3-13.el7_3.1libgcrypt-debuginfo-1.5.3-13.el7_3.1.i686.rpm
RedHat7ppclibgcrypt< 1.5.3-13.el7_3.1libgcrypt-1.5.3-13.el7_3.1.ppc.rpm
RedHat7s390libgcrypt-debuginfo< 1.5.3-13.el7_3.1libgcrypt-debuginfo-1.5.3-13.el7_3.1.s390.rpm
RedHat6s390xlibgcrypt-devel< 1.4.5-12.el6_8libgcrypt-devel-1.4.5-12.el6_8.s390x.rpm
RedHat6s390libgcrypt< 1.4.5-12.el6_8libgcrypt-1.4.5-12.el6_8.s390.rpm
RedHat7x86_64libgcrypt< 1.5.3-13.el7_3.1libgcrypt-1.5.3-13.el7_3.1.x86_64.rpm
RedHat6ppc64libgcrypt< 1.4.5-12.el6_8libgcrypt-1.4.5-12.el6_8.ppc64.rpm
RedHat6x86_64libgcrypt-debuginfo< 1.4.5-12.el6_8libgcrypt-debuginfo-1.4.5-12.el6_8.x86_64.rpm
RedHat7ppclibgcrypt-devel< 1.5.3-13.el7_3.1libgcrypt-devel-1.5.3-13.el7_3.1.ppc.rpm
RedHat7ppc64libgcrypt-debuginfo< 1.5.3-13.el7_3.1libgcrypt-debuginfo-1.5.3-13.el7_3.1.ppc64.rpm
Rows per page:
1-10 of 421

Related

nessus 31
openvas 25
redhatcve 1
debian 6
osv 5
amazon 1
ibm 12
mageia 1
debiancve 1
cloudfoundry 2
freebsd 1
oraclelinux 1
prion 1
ubuntu 2
ubuntucve 2
centos 1
gentoo 2
fedora 5
veracode 1
archlinux 2
altlinux 1
alpinelinux 1
cve 1
slackware 2
cvelist 1
f5 1
nvd 1
photon 1
suse 2
nessus
nessus
Debian DSA-3649-1 : gnupg - security update
2016-08-18 00:00:00
Debian DLA-602-1 : gnupg security and hardening update
2016-08-30 00:00:00
SUSE SLES11 Security Update : libgcrypt (SUSE-SU-2016:2346-1)
2016-09-22 00:00:00
openvas
openvas
Debian Security Advisory DSA 3649-1 (gnupg - security update)
2016-08-17 00:00:00
Fedora Update for gnupg FEDORA-2016-3a0195918f
2016-09-14 00:00:00
Fedora Update for libgcrypt FEDORA-2016-2b4ecfa79f
2016-09-08 00:00:00
redhatcve
redhatcve
CVE-2016-6313
2016-08-18 21:04:33
debian
debian
[SECURITY] [DSA 3649-1] gnupg security update
2016-08-17 21:35:30
[SECURITY] [DSA 3650-1] libgcrypt20 security update
2016-08-17 21:35:36
[SECURITY] [DSA 3650-1] libgcrypt20 security update
2016-08-17 21:35:36
osv
osv
libgcrypt20 - security update
2016-08-17 00:00:00
libgcrypt11 - security update
2016-08-23 00:00:00
gnupg - security update
2016-08-17 00:00:00
amazon
amazon
Medium: libgcrypt, gnupg
2016-09-15 19:00:00
ibm
ibm
Security Bulletin: A vulnerability in GnuPG libgcrypt affects IBM Security Network Protection (CVE-2016-6313)
2018-06-16 21:48:00
Security Bulletin: IBM Security Access Manager appliances are affected by a vulnerability in the libgcrypt library (CVE-2016-6313)
2018-06-16 21:50:47
Security Bulletin: A vulnerability in GnuPG (gpg) affects PowerKVM
2018-06-18 01:34:46
mageia
mageia
Updated gnupg/libgcrypt packages fix security vulnerability
2016-08-31 18:32:33
debiancve
debiancve
CVE-2016-6313
2016-12-13 20:59:04
cloudfoundry
cloudfoundry
USN-3064-1 GnuPG vulnerability | Cloud Foundry
2016-08-25 00:00:00
USN-3065-1 Libgcrypt vulnerability | Cloud Foundry
2016-08-25 00:00:00
freebsd
freebsd
gnupg -- attacker who obtains 4640 bits from the RNG can trivially predict the next 160 bits of output
2016-08-17 00:00:00
oraclelinux
oraclelinux
libgcrypt security update
2016-11-09 00:00:00
prion
prion
Design/Logic Flaw
2016-12-13 20:59:00
ubuntu
ubuntu
GnuPG vulnerability
2016-08-18 00:00:00
Libgcrypt vulnerability
2016-08-18 00:00:00
ubuntucve
ubuntucve
CVE-2016-6313
2016-08-17 00:00:00
CVE-2016-6316
2016-09-07 00:00:00
centos
centos
libgcrypt security update
2016-11-12 06:30:21
gentoo
gentoo
GnuPG: RNG output is predictable
2016-12-02 00:00:00
libgcrypt: Multiple vulnerabilities
2016-10-10 00:00:00
fedora
fedora
[SECURITY] Fedora 25 Update: gnupg-1.4.21-1.fc25
2016-08-30 18:22:15
[SECURITY] Fedora 23 Update: gnupg-1.4.21-1.fc23
2016-09-14 01:23:53
[SECURITY] Fedora 25 Update: libgcrypt-1.6.6-1.fc25
2016-08-27 11:09:12
veracode
veracode
Information Leakage
2019-01-15 09:14:36
archlinux
archlinux
libgcrypt: information disclosure
2016-08-21 00:00:00
lib32-libgcrypt: information disclosure
2016-09-17 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package gnupg version 1.4.21-alt1
2017-03-28 00:00:00
alpinelinux
alpinelinux
CVE-2016-6313
2016-12-13 20:59:04
cve
cve
CVE-2016-6313
2016-12-13 20:59:04
slackware
slackware
[slackware-security] gnupg
2016-08-23 20:58:51
[slackware-security] libgcrypt
2016-08-23 21:12:28
cvelist
cvelist
CVE-2016-6313
2016-12-13 20:00:00
f5
f5
K09040132 : libgcrypt vulnerability CVE-2016-6313
2017-07-03 00:00:00
nvd
nvd
CVE-2016-6313
2016-12-13 20:59:04
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2017-0013
2017-04-24 00:00:00
suse
suse
Security update for SLES 12-SP1 Docker image (important)
2017-10-11 03:07:32
Security update for SLES 12 Docker image (important)
2017-10-11 03:06:53

0.007 Low

EPSS

Percentile

80.6%

JSON
Related for RHSA-2016:2674
nessus31openvas25redhatcve1debian6osv5amazon1ibm12mageia1debiancve1cloudfoundry2freebsd1oraclelinux1prion1ubuntu2ubuntucve2centos1gentoo2fedora5veracode1archlinux2altlinux1alpinelinux1cve1slackware2cvelist1f51nvd1photon1suse2