Lucene search
Veracode Vulnerability DatabaseVERACODE:7248HistoryAug 07, 2018 - 6:10 a.m.
Side-Channel Attack
2018-08-0706:10:21
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.002 Low
EPSS
Percentile
58.7%
libgcrypt.so is vulnerable to side-channel attacks. The elliptic-point curve multiplication during decryption is not properly performed, which allows attackers within close proximity to extract the secret decryption key within seconds by measuring electromagnetic emanations.
| CPE | Name | Operator | Version |
|---|---|---|---|
| libgcrypt.so | le | 20.3.4 |
Related
openvas
openvas
Fedora Update for libgcrypt FEDORA-2016-83cd045bcc
2016-08-02 00:00:00
Fedora Update for libgcrypt FEDORA-2016-ec4c27d766
2016-08-06 00:00:00
Debian: Security Advisory (DSA-3474-1)
2016-02-11 00:00:00
debian
debian
[SECURITY] [DSA 3474-1] libgcrypt20 security update
2016-02-12 16:07:28
[SECURITY] [DSA 3478-1] libgcrypt11 security update
2016-02-15 19:18:40
[SECURITY] [DSA 3474-1] libgcrypt20 security update
2016-02-12 16:07:28
nessus
nessus
Debian DSA-3474-1 : libgcrypt20 - security update
2016-02-15 00:00:00
SUSE SLED12 / SLES12 Security Update : libgcrypt (SUSE-SU-2016:1089-1)
2016-04-19 00:00:00
Fedora 24 : libgcrypt (2016-83cd045bcc)
2016-07-25 00:00:00
debiancve
debiancve
CVE-2015-7511
2016-04-19 21:59:03
cve
cve
CVE-2015-7511
2016-04-19 21:59:03
fedora
fedora
[SECURITY] Fedora 24 Update: libgcrypt-1.6.5-1.fc24
2016-07-22 18:24:46
[SECURITY] Fedora 23 Update: libgcrypt-1.6.5-1.fc23
2016-08-05 20:52:55
nvd
nvd
CVE-2015-7511
2016-04-19 21:59:03
osv
osv
libgcrypt11 - security update
2016-02-15 00:00:00
libgcrypt20 - security update
2016-02-12 00:00:00
cvelist
cvelist
CVE-2015-7511
2016-04-19 21:00:00
archlinux
archlinux
libgcrypt: secret key extraction
2016-02-24 00:00:00
ubuntucve
ubuntucve
CVE-2015-7511
2015-12-31 00:00:00
freebsd
freebsd
libgcrypt -- side-channel attack on ECDH
2016-02-09 00:00:00
prion
prion
Code injection
2016-04-19 21:59:00
ubuntu
ubuntu
Libgcrypt vulnerability
2016-02-15 00:00:00
slackware
slackware
[slackware-security] libgcrypt
2016-02-23 19:51:05
mageia
mageia
Updated libgcrypt packages fix security vulnerabilities
2016-02-17 22:06:01
gentoo
gentoo
libgcrypt: Multiple vulnerabilities
2016-10-10 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1870
2021-07-02 17:14:28
suse
suse
Security update for SLES 12-SP1 Docker image (important)
2017-10-11 03:07:32
Security update for SLES 12 Docker image (important)
2017-10-11 03:06:53