Lucene search
GoogleOSV:DSA-3478-1HistoryFeb 15, 2016 - 12:00 a.m.
libgcrypt11 - security update
2016-02-1500:00:00
Google
osv.dev
7
0.002 Low
EPSS
Percentile
58.8%
Daniel Genkin, Lev Pachmanov, Itamar Pipman and Eran Tromer discovered
that the ECDH secret decryption keys in applications using the
libgcrypt11 library could be leaked via a side-channel attack.
See
https://www.cs.tau.ac.IL/~tromer/ecdh/ for details.
For the oldstable distribution (wheezy), this problem has been fixed
in version 1.5.0-5+deb7u4.
We recommend that you upgrade your libgcrypt11 packages.
| CPE | Name | Operator | Version |
|---|---|---|---|
| libgcrypt11 | eq | 1.5.0-5 | |
| libgcrypt11 | eq | 1.5.0-5+deb7u3 | |
| libgcrypt11 | eq | 1.5.0-5+deb7u2 | |
| libgcrypt11 | eq | 1.5.0-5+deb7u1 |
References
Related
openvas
openvas
Fedora Update for libgcrypt FEDORA-2016-83cd045bcc
2016-08-02 00:00:00
Fedora Update for libgcrypt FEDORA-2016-ec4c27d766
2016-08-06 00:00:00
Ubuntu: Security Advisory (USN-2896-1)
2016-02-16 00:00:00
cve
cve
CVE-2015-7511
2016-04-19 21:59:03
debian
debian
[SECURITY] [DSA 3478-1] libgcrypt11 security update
2016-02-15 19:18:40
[SECURITY] [DSA 3474-1] libgcrypt20 security update
2016-02-12 16:07:28
[SECURITY] [DSA 3474-1] libgcrypt20 security update
2016-02-12 16:07:28
nessus
nessus
Debian DSA-3474-1 : libgcrypt20 - security update
2016-02-15 00:00:00
FreeBSD : libgcrypt -- side-channel attack on ECDH (95b92e3b-d451-11e5-9794-e8e0b747a45a)
2016-02-16 00:00:00
openSUSE Security Update : libgcrypt (openSUSE-2016-267)
2016-02-26 00:00:00
debiancve
debiancve
CVE-2015-7511
2016-04-19 21:59:03
cvelist
cvelist
CVE-2015-7511
2016-04-19 21:00:00
archlinux
archlinux
libgcrypt: secret key extraction
2016-02-24 00:00:00
osv
osv
libgcrypt20 - security update
2016-02-12 00:00:00
ubuntucve
ubuntucve
CVE-2015-7511
2015-12-31 00:00:00
ubuntu
ubuntu
Libgcrypt vulnerability
2016-02-15 00:00:00
freebsd
freebsd
libgcrypt -- side-channel attack on ECDH
2016-02-09 00:00:00
prion
prion
Code injection
2016-04-19 21:59:00
fedora
fedora
[SECURITY] Fedora 24 Update: libgcrypt-1.6.5-1.fc24
2016-07-22 18:24:46
[SECURITY] Fedora 23 Update: libgcrypt-1.6.5-1.fc23
2016-08-05 20:52:55
nvd
nvd
CVE-2015-7511
2016-04-19 21:59:03
veracode
veracode
Side-Channel Attack
2018-08-07 06:10:21
mageia
mageia
Updated libgcrypt packages fix security vulnerabilities
2016-02-17 22:06:01
slackware
slackware
[slackware-security] libgcrypt
2016-02-23 19:51:05
gentoo
gentoo
libgcrypt: Multiple vulnerabilities
2016-10-10 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1870
2021-07-02 17:14:28
suse
suse
Security update for SLES 12 Docker image (important)
2017-10-11 03:06:53
Security update for SLES 12-SP1 Docker image (important)
2017-10-11 03:07:32