LI
Product
Libgcrypt
17
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 10Low 1
Watch
Add Libgcrypt to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-7526 | 6.8 | Jul 26 | libgcrypt before version 1.7.8 is vulnerable to a cache side-channel attack resulting into a complete break of RSA-1024 while using the left-to-right method for computing the… Affected: before 1.7.8 |
| CVE-2026-41989 | 6.7 | Apr 23 | Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcry_pk_decrypt Affected: 1.8.8 before 1.10.4; 1.11.0 before 1.11.3; 1.12.0 before 1.12.2 |
| CVE-2021-40528 | 5.9 | Sep 6 | The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction between two cryptographic libraries, a certain dangerous combination of… Affected: before 1.9.4 |
| CVE-2015-0837 | 5.9 | Nov 29 | The mpi_powm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timing differences when accessing a… Affected: before 1.6.3 |
| CVE-2019-12904 | 5.9 | Jun 19 | In Libgcrypt 1.8.4, the C implementation of AES is vulnerable to a flush-and-reload side-channel attack because physical addresses are available to other processes Affected: 1.8.4 |
| CVE-2017-9526 | 5.9 | Jun 11 | In Libgcrypt before 1.7.7, an attacker who learns the EdDSA session key (from side-channel observation during the signing process) can easily recover the long-term secret key Affected: through 1.7.6 |
| CVE-2016-6313 | 5.3 | Dec 13 | The mixing functions in the random number generator in Libgcrypt before 1.5.6, 1.6.x before 1.6.6, and 1.7.x before 1.7.3 and GnuPG before 1.4.21 make it easier for attackers to… Affected: through 1.5.3; 1.6.0; 1.6.1; 1.6.2; 1.6.3; 1.6.4; +4 more |
| CVE-2018-0495 | 4.7 | Jun 13 | Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing… Affected: before 1.7.10; 1.8.0 before 1.8.3 |
| CVE-2014-3591 | 4.2 | Nov 29 | Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for Elgamal decryption, which allows physically proximate attackers to obtain the server's… Affected: before 1.6.3 |
| CVE-2026-41990 | 4.0 | Apr 23 | Libgcrypt before 1.12.2 mishandles Dilithium signing Affected: 1.12.0 before 1.12.2 |
Showing 10