Lucene search

K

DebianCVELIST:CVE-2017-0379

HistoryAug 29, 2017 - 10:00 p.m.

CVE-2017-0379

2017-08-2922:00:00

debian

www.cve.org

7

AI Score

6.4

Confidence

High

EPSS

0.004

Percentile

74.6%

Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it easier for attackers to discover a secret key, related to cipher/ecc.c and mpi/ec.c.

CNA Affected

[
  {
    "product": "libgcrypt",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "libgcrypt"
      }
    ]
  }
]

References

www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html

www.securityfocus.com/bid/100503

www.securitytracker.com/id/1041294

bugs.debian.org/873383

eprint.iacr.org/2017/806

git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git%3Ba=commit%3Bh=da780c8183cccc8f533c8ace8211ac2cb2bdee7b

lists.debian.org/debian-security-announce/2017/msg00221.html

security-tracker.debian.org/tracker/CVE-2017-0379

security.netapp.com/advisory/ntap-20180726-0002/

www.debian.org/security/2017/dsa-3959

www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html

AI Score

6.4

Confidence

High

EPSS

0.004

Percentile

74.6%

Related for CVELIST:CVE-2017-0379

openvas6 slackware1 fedora3 debiancve1 cve1 nvd1 nessus8 ubuntucve1 prion1 archlinux2 redhatcve1 alpinelinux1 debian2 osv3 freebsd1 ubuntu1 mageia1 veracode1 rosalinux1 ibm1 photon1 oracle2