RedHatRHSA-2016:2674(RHSA-2016:2674) Moderate: libgcrypt security update
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.007 Low
EPSS
Percentile
80.1%
The libgcrypt library provides general-purpose implementations of various cryptographic algorithms.
Security Fix(es):
- A design flaw was found in the libgcrypt PRNG (Pseudo-Random Number Generator). An attacker able to obtain the first 580 bytes of the PRNG output could predict the following 20 bytes. (CVE-2016-6313)
Red Hat would like to thank Felix Dörre and Vladimir Klebanov for reporting this issue.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 7 | i686 | libgcrypt-debuginfo | < 1.5.3-13.el7_3.1 | libgcrypt-debuginfo-1.5.3-13.el7_3.1.i686.rpm |
| RedHat | 7 | ppc | libgcrypt | < 1.5.3-13.el7_3.1 | libgcrypt-1.5.3-13.el7_3.1.ppc.rpm |
| RedHat | 7 | s390 | libgcrypt-debuginfo | < 1.5.3-13.el7_3.1 | libgcrypt-debuginfo-1.5.3-13.el7_3.1.s390.rpm |
| RedHat | 6 | s390x | libgcrypt-devel | < 1.4.5-12.el6_8 | libgcrypt-devel-1.4.5-12.el6_8.s390x.rpm |
| RedHat | 6 | s390 | libgcrypt | < 1.4.5-12.el6_8 | libgcrypt-1.4.5-12.el6_8.s390.rpm |
| RedHat | 7 | x86_64 | libgcrypt | < 1.5.3-13.el7_3.1 | libgcrypt-1.5.3-13.el7_3.1.x86_64.rpm |
| RedHat | 6 | ppc64 | libgcrypt | < 1.4.5-12.el6_8 | libgcrypt-1.4.5-12.el6_8.ppc64.rpm |
| RedHat | 6 | x86_64 | libgcrypt-debuginfo | < 1.4.5-12.el6_8 | libgcrypt-debuginfo-1.4.5-12.el6_8.x86_64.rpm |
| RedHat | 7 | ppc | libgcrypt-devel | < 1.5.3-13.el7_3.1 | libgcrypt-devel-1.5.3-13.el7_3.1.ppc.rpm |
| RedHat | 7 | ppc64 | libgcrypt-debuginfo | < 1.5.3-13.el7_3.1 | libgcrypt-debuginfo-1.5.3-13.el7_3.1.ppc64.rpm |
Related
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.007 Low
EPSS
Percentile
80.1%