Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:6357
HistoryMay 23, 2018 - 6:17 a.m.

Sensitive Information Leakage

2018-05-2306:17:25
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8

EPSS

0.002

Percentile

57.0%

libgcrypt.so is vulnerable to sensitive information leakage. The leakage persists because cipher/elgamal.c uses ElGamal encryption algorithm which has the ability of self re-randomization, and the support of key splitting to directly encrypt the messages.