LI
Product
Libgcrypt
17
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 10Low 1
Watch
Add Libgcrypt to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-3345 | 7.8 | Jan 29 | _gcry_md_block_write in cipher/hash-common.c in Libgcrypt version 1.9.0 has a heap-based buffer overflow when the digest final function sets a large count value Affected: 1.9.0 |
| CVE-2021-33560 | 7.5 | Jun 8 | Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm, and the window… Affected: before 1.8.8; 1.9.0 before 1.9.3 |
| CVE-2018-6829 | 7.5 | Feb 7 | cipher/elgamal.c in Libgcrypt through 1.8.2, when used to encrypt messages directly, improperly encodes plaintexts, which allows attackers to obtain sensitive information by… Affected: through 1.8.2 |
| CVE-2017-0379 | 7.5 | Aug 29 | Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it easier for attackers to discover a secret key, related to cipher/ecc.c and… Affected: through 1.8.0 |
| CVE-2017-7526 | 6.8 | Jul 26 | libgcrypt before version 1.7.8 is vulnerable to a cache side-channel attack resulting into a complete break of RSA-1024 while using the left-to-right method for computing the… Affected: before 1.7.8 |
| CVE-2026-41989 | 6.7 | Apr 23 | Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcry_pk_decrypt Affected: 1.8.8 before 1.10.4; 1.11.0 before 1.11.3; 1.12.0 before 1.12.2 |
| CVE-2021-40528 | 5.9 | Sep 6 | The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction between two cryptographic libraries, a certain dangerous combination of… Affected: before 1.9.4 |
| CVE-2015-0837 | 5.9 | Nov 29 | The mpi_powm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timing differences when accessing a… Affected: before 1.6.3 |
| CVE-2019-12904 | 5.9 | Jun 19 | In Libgcrypt 1.8.4, the C implementation of AES is vulnerable to a flush-and-reload side-channel attack because physical addresses are available to other processes Affected: 1.8.4 |
| CVE-2017-9526 | 5.9 | Jun 11 | In Libgcrypt before 1.7.7, an attacker who learns the EdDSA session key (from side-channel observation during the signing process) can easily recover the long-term secret key Affected: through 1.7.6 |
| CVE-2016-6313 | 5.3 | Dec 13 | The mixing functions in the random number generator in Libgcrypt before 1.5.6, 1.6.x before 1.6.6, and 1.7.x before 1.7.3 and GnuPG before 1.4.21 make it easier for attackers to… Affected: through 1.5.3; 1.6.0; 1.6.1; 1.6.2; 1.6.3; 1.6.4; +4 more |
| CVE-2018-0495 | 4.7 | Jun 13 | Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing… Affected: before 1.7.10; 1.8.0 before 1.8.3 |
| CVE-2014-3591 | 4.2 | Nov 29 | Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for Elgamal decryption, which allows physically proximate attackers to obtain the server's… Affected: before 1.6.3 |
| CVE-2026-41990 | 4.0 | Apr 23 | Libgcrypt before 1.12.2 mishandles Dilithium signing Affected: 1.12.0 before 1.12.2 |
| CVE-2015-7511 | 2.0 | Apr 19 | Libgcrypt before 1.6.5 does not properly perform elliptic-point curve multiplication during decryption, which makes it easier for physically proximate attackers to extract ECDH… Affected: through 1.6.4 |
| CVE-2014-5270 | – | Oct 10 | Libgcrypt before 1.5.4, as used in GnuPG and other products, does not properly perform ciphertext normalization and ciphertext randomization, which makes it easier for physically… Affected: through 1.5.3; 1.4.0; 1.4.3; 1.4.4; 1.4.5; 1.4.6; +3 more |
| CVE-2013-4242 | – | Aug 19 | GnuPG before 1.4.14, and Libgcrypt before 1.5.3 as used in GnuPG 2.0.x and possibly other products, allows local users to obtain private RSA keys via a cache side-channel attack… Affected: through 1.5.2; 1.4.0; 1.4.3; 1.4.4; 1.4.5; 1.4.6; +2 more |
Showing 17