PRIOn knowledge basePRION:CVE-2015-7511Code injection
2 Low
CVSS3
Attack Vector
PHYSICAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
6.8 Medium
AI Score
Confidence
Low
1.9 Low
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:M/Au:N/C:P/I:N/A:N
0.002 Low
EPSS
Percentile
57.9%
Libgcrypt before 1.6.5 does not properly perform elliptic-point curve multiplication during decryption, which makes it easier for physically proximate attackers to extract ECDH keys by measuring electromagnetic emanations.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ubuntu_linux | eq | 12.04 | |
| ubuntu_linux | eq | 15.10 | |
| ubuntu_linux | eq | 14.04 | |
| debian_linux | eq | 8.0 | |
| debian_linux | eq | 7.0 | |
| libgcrypt | le | 1.6.4 |
References
lists.opensuse.org/opensuse-updates/2016-05/msg00027.html
www.cs.tau.ac.IL/~tromer/ecdh/
www.debian.org/security/2016/dsa-3474
www.debian.org/security/2016/dsa-3478
www.securityfocus.com/bid/83253
www.ubuntu.com/usn/USN-2896-1
lists.fedoraproject.org/archives/list/[email protected]/message/W2IL4PAEICHGA2XMQYRY3MIWHM4GMPAG/
lists.gnupg.org/pipermail/gnupg-announce/2016q1/000384.html
security.gentoo.org/glsa/201610-04
Related
2 Low
CVSS3
Attack Vector
PHYSICAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
6.8 Medium
AI Score
Confidence
Low
1.9 Low
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:M/Au:N/C:P/I:N/A:N
0.002 Low
EPSS
Percentile
57.9%