The vulnerability of the Libgcrypt cryptographic library, which stems from the use of a weak cryptographic algorithm. This allows attackers to gain access to confidential information.

🗓️ 26 May 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Libgcrypt vulnerability uses a weak algorithm, allowing remote attackers to access confidential information.

Reporter	Title	Published	Views	Family All 149
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct for UNIX Certified Container is affected by multiple vulnerabilities in Red Hat Universal Base Image version 8.4-206.1626828523 and Binutils version 2.30-93	14 Mar 202220:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	19 Jan 202313:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to using components with Known Vulnerabilities	25 Apr 202214:44	–	ibm
Tenable Nessus	Amazon Linux 2 : libgcrypt (ALAS-2022-1769)	6 Apr 202200:00	–	nessus
Tenable Nessus	Amazon Linux AMI : libgcrypt (ALAS-2022-1578)	6 Apr 202200:00	–	nessus
Tenable Nessus	AlmaLinux 8 : libgcrypt (ALSA-2021:4409)	9 Feb 202200:00	–	nessus
Tenable Nessus	CentOS 8 : libgcrypt (CESA-2021:4409)	11 Nov 202100:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP2 : libgcrypt (EulerOS-SA-2021-2395)	14 Sep 202100:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : libgcrypt (EulerOS-SA-2021-2469)	24 Sep 202100:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP5 : libgcrypt (EulerOS-SA-2021-2503)	27 Sep 202100:00	–	nessus

Vulners

Node

werner_koch libgcryptRange<1.8.8aurora

OR

werner_koch libgcryptRange1.9.0–1.9.3aurora

OR

fedora fedoraMatch33

OR

fedora fedoraMatch34

Source	Link
cve	www.cve.omprussia.ru/bb10321
cve	www.cve.omprussia.ru/bb11322
cve	www.cve.omprussia.ru/bb12323
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-33560
lists	www.lists.debian.org/debian-lts-announce/2021/06/msg00021.html
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/R7OAPCUGPF3VLA7QAJUQSL255D4ITVTL/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/BKKTOIGFW2SGN3DO2UHHVZ7MJSYN4AAB/
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.1/
strelets	www.strelets.net/patchi-i-obnovleniya-bezopasnosti
altsp	www.altsp.su/obnovleniya-bezopasnosti/

07 Oct 2025 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 37.5

CVSS 27.8

EPSS0.00425

Libgcrypt vulnerability weak algorithm remote attacker confidential information