Lucene search

CVE-2021-40528

🗓️ 09 Sep 2021 19:03:46Reported by redhat.comType

A flaw in libgcrypt's ElGamal implementation allows plaintext recovery via cross-configuration attack, posing a threat to OpenPGP confidentiality

Reporter	Title	Published	Views	Family All 199
Ubuntu	Libgcrypt vulnerabilities	16 Sep 202100:00	–	ubuntu
Ubuntu	Libgcrypt vulnerabilities	16 Sep 202100:00	–	ubuntu
Gentoo Linux	libgcrypt: Multiple Vulnerabilities	31 Oct 202200:00	–	gentoo
Tenable Nessus	GLSA-202210-13 : libgcrypt: Multiple Vulnerabilities	31 Oct 202200:00	–	nessus
Tenable Nessus	Oracle Linux 8 : libgcrypt (ELSA-2022-5311)	1 Jul 202200:00	–	nessus
Tenable Nessus	Ubuntu 16.04 ESM : Libgcrypt vulnerabilities (USN-5080-2)	21 Sep 202100:00	–	nessus
Tenable Nessus	Oracle Linux 8 : libgcrypt (ELSA-2022-9564)	8 Jul 202200:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP3 : libgcrypt (EulerOS-SA-2022-1173)	23 Feb 202200:00	–	nessus
Tenable Nessus	Ubuntu 18.04 LTS / 20.04 LTS : Libgcrypt vulnerabilities (USN-5080-1)	16 Sep 202100:00	–	nessus
Tenable Nessus	EulerOS Virtualization 3.0.2.2 : libgcrypt (EulerOS-SA-2023-1266)	30 Jan 202300:00	–	nessus

Source	Link
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-40528
dev	www.dev.gnupg.org/rCb118681ebc4c9ea4b9da79b0f9541405a64f4c13
eprint	www.eprint.iacr.org/2021/923
ibm	www.ibm.github.io/system-security-research-updates/2021/07/20/insecurity-elgamal-pt1
ibm	www.ibm.github.io/system-security-research-updates/2021/09/06/insecurity-elgamal-pt2
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

09 Sep 2021 19:46Current

1.7Low risk

Vulners AI Score1.7

CVSS25.0

CVSS37.5

EPSS0.002