Lucene search
GoogleOSV:DSA-3073-1HistoryNov 16, 2014 - 12:00 a.m.
libgcrypt11 - security update
2014-11-1600:00:00
Google
osv.dev
9
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
Daniel Genkin, Itamar Pipman and Eran Tromer discovered that Elgamal
encryption subkeys in applications using the libgcrypt11 library, for
example GnuPG 2.x, could be leaked via a side-channel attack.
For the stable distribution (wheezy), this problem has been fixed in
version 1.5.0-5+deb7u2.
We recommend that you upgrade your libgcrypt11 packages.
| CPE | Name | Operator | Version |
|---|---|---|---|
| libgcrypt11 | eq | 1.5.0-5 | |
| libgcrypt11 | eq | 1.5.0-5+deb7u1 |
References
Related
nessus
nessus
Debian DLA-93-1 : libgcrypt11 security update
2015-03-26 00:00:00
Mandriva Linux Security Advisory : libgcrypt (MDVSA-2014:176)
2014-09-12 00:00:00
Debian DSA-3024-1 : gnupg - security update
2014-09-14 00:00:00
osv
osv
gnupg - security update
2014-09-11 00:00:00
libgcrypt11 - security update
2014-11-25 00:00:00
gnupg - security-update
2014-09-14 00:00:00
ubuntu
ubuntu
Libgcrypt vulnerability
2014-09-03 00:00:00
GnuPG vulnerability
2014-09-03 00:00:00
GnuPG vulnerabilities
2015-04-01 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2014:1077-1)
2021-06-09 00:00:00
Debian: Security Advisory (DLA-93-1)
2023-03-08 00:00:00
Debian Security Advisory DSA 3024-1 (gnupg - security update)
2014-09-11 00:00:00
debian
debian
[SECURITY] [DSA 3073-1] libgcrypt11 security update
2014-11-16 13:18:08
[SECURITY] [DLA 53-1] gnupg security update
2014-09-14 07:23:55
[SECURITY] [DLA 93-1] libgcrypt11 security update
2014-11-25 09:25:48
securityvulns
securityvulns
GnuPG / libcrypt information leakage
2014-09-15 00:00:00
[USN-2339-1] GnuPG vulnerability
2014-09-15 00:00:00
[USN-2554-1] GnuPG vulnerabilities
2015-04-09 00:00:00
gentoo
gentoo
Libgcrypt: Side-channel attack
2014-08-29 00:00:00
mageia
mageia
Updated libgcrypt packages fix CVE-2014-5270
2014-09-05 13:07:37
Updated gnupg packages fix CVE-2014-5270
2014-09-22 12:31:24
cve
cve
CVE-2014-5270
2014-10-10 01:55:00
prion
prion
Code injection
2014-10-10 01:55:00
ubuntucve
ubuntucve
CVE-2014-5270
2014-08-18 00:00:00
debiancve
debiancve
CVE-2014-5270
2014-10-10 01:55:00
amazon
amazon
Medium: libgcrypt
2015-08-04 17:43:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1870
2021-07-02 17:14:28
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
Related for OSV:DSA-3073-1