Lucene search
+L

1053 matches found

Mageia
Mageia
added 2019/09/06 9:9 p.m.41 views

Updated libgcrypt packages fix security vulnerability

Updated libgcrypt packages fix security vulnerability: ECDSA timing side-channel attack vulnerability CVE-2019-13627...

6.3CVSS2.3AI score0.0051EPSS
SaveExploits0References2
OSV
OSV
added 2019/09/06 9:9 p.m.10 views

MGASA-2019-0256 Updated libgcrypt packages fix security vulnerability

Updated libgcrypt packages fix security vulnerability: ECDSA timing side-channel attack vulnerability CVE-2019-13627...

6.3CVSS6.3AI score0.0051EPSS
SaveExploits0References3
Fedora
Fedora
added 2019/09/06 12:36 p.m.22 views

[SECURITY] Fedora 30 Update: libgcrypt-1.8.5-1.fc30

Libgcrypt is a general purpose crypto library based on the code used in GNU Privacy Guard. This is a development version...

2.5AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2019/09/03 12:0 a.m.34 views

FreeBSD : libgcrypt -- ECDSA timing attack (c9c6c2f8-cd54-11e9-af89-080027ef1a23)

GnuPG reports : Mitigate an ECDSA timing attack. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2021 Jacques Vidrine and contributors Redistribution and use in source VuXML and 'compiled' form...

6.3CVSS6.6AI score0.0051EPSS
SaveExploits0References2
CNVD
CNVD
added 2019/09/02 12:0 a.m.2 views

Libgcrypt Information Disclosure Vulnerability (CNVD-2019-30481)

Libgcrypt is a general purpose encryption library. An information disclosure vulnerability exists in Libgcrypt, which can be exploited by an attacker to bypass access restrictions and obtain sensitive information...

6.3CVSS8.8AI score0.0051EPSS
SaveExploits0References1
FreeBSD
FreeBSD
added 2019/08/29 12:0 a.m.23 views

libgcrypt -- ECDSA timing attack

GnuPG reports: Mitigate an ECDSA timing attack...

6.3CVSS1.5AI score0.0051EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2019/07/26 12:0 a.m.18 views

SUSE SLED15 / SLES15 Security Update : libgcrypt (SUSE-SU-2019:1971-1)

This update for libgcrypt fixes the following issues : Security issue fixed : CVE-2019-12904: Fixed a flush-and-reload side-channel attack in the AES implementation bsc1138939. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisor...

5.9CVSS6.6AI score0.02063EPSS
SaveExploits0References4
OSV
OSV
added 2019/07/25 12:58 p.m.10 views

SUSE-SU-2019:1971-1 Security update for libgcrypt

This update for libgcrypt fixes the following issues: Security issue fixed: - CVE-2019-12904: Fixed a flush-and-reload side-channel attack in the AES implementation bsc1138939...

5.9CVSS6AI score0.02063EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2019/07/24 12:0 a.m.20 views

openSUSE: Security Advisory for libgcrypt (openSUSE-SU-2019:1792-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5.9CVSS6.4AI score0.02063EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2019/07/24 12:0 a.m.32 views

openSUSE Security Update : libgcrypt (openSUSE-2019-1792)

This update for libgcrypt fixes the following issues : Security issues fixed : - CVE-2019-12904: The C implementation of AES is vulnerable to a flush-and-reload side-channel attack because physical addresses are available to other processes. The C implementation is used on platforms where an...

5.9CVSS6.5AI score0.02063EPSS
SaveExploits0References4
OSV
OSV
added 2019/07/23 11:22 a.m.9 views

OPENSUSE-SU-2019:1792-1 Security update for libgcrypt

This update for libgcrypt fixes the following issues: Security issues fixed: - CVE-2019-12904: The C implementation of AES is vulnerable to a flush-and-reload side-channel attack because physical addresses are available to other processes. The C implementation is used on platforms where an...

5.9CVSS8AI score0.02063EPSS
SaveExploits0References5
OPENSUSE Linux
OPENSUSE Linux
added 2019/07/23 12:0 a.m.93 views

Security update for libgcrypt (moderate)

openSUSE Security Update: Security update for libgcrypt Announcement ID: openSUSE-SU-2019:1792-1 Rating: moderate References: 1097073 1125740 1138939 Cross-References: CVE-2019-12904 Affected Products: openSUSE Leap 15.0 An update that solves one vulnerability and has two fixes is now available...

5.9CVSS6AI score0.02063EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2019/07/22 12:0 a.m.30 views

EulerOS 2.0 SP2 : libgcrypt (EulerOS-SA-2019-1750)

According to the versions of the libgcrypt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Libgcrypt before 1.5.4, as used in GnuPG and other products, does not properly perform ciphertext normalization and ciphertext randomization,...

6.8CVSS6.9AI score0.03885EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2019/07/17 12:0 a.m.27 views

SUSE SLED15 / SLES15 Security Update : libgcrypt (SUSE-SU-2019:1859-1)

This update for libgcrypt fixes the following issues : Security issues fixed : CVE-2019-12904: The C implementation of AES is vulnerable to a flush-and-reload side-channel attack because physical addresses are available to other processes. The C implementation is used on platforms where an...

5.9CVSS6.5AI score0.02063EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2019/07/16 1:21 p.m.25 views

CVE-2019-12904

Disputed A vulnerability has been identified in Libgcrypt due to a flaw in its C implementation of AES. This vulnerability enables a remote attacker to perform a flush-and-reload side-channel attack, potentially accessing sensitive information. The vulnerability arises from the availability of...

5.9CVSS6.2AI score0.02063EPSS
SaveExploits0References6
OSV
OSV
added 2019/07/16 11:8 a.m.10 views

SUSE-SU-2019:1859-1 Security update for libgcrypt

This update for libgcrypt fixes the following issues: Security issues fixed: - CVE-2019-12904: The C implementation of AES is vulnerable to a flush-and-reload side-channel attack because physical addresses are available to other processes. The C implementation is used on platforms where an...

5.9CVSS5.8AI score0.02063EPSS
SaveExploits0References5
OSV
OSV
added 2019/06/20 12:15 a.m.10 views

CVE-2019-12904

In Libgcrypt 1.8.4, the C implementation of AES is vulnerable to a flush-and-reload side-channel attack because physical addresses are available to other processes. The C implementation is used on platforms where an assembly-language implementation is unavailable. NOTE: the vendor's position is...

5.9CVSS5.8AI score
SaveExploits0References5
NVD
NVD
added 2019/06/20 12:15 a.m.18 views

CVE-2019-12904

In Libgcrypt 1.8.4, the C implementation of AES is vulnerable to a flush-and-reload side-channel attack because physical addresses are available to other processes. The C implementation is used on platforms where an assembly-language implementation is unavailable. NOTE: the vendor's position is...

5.9CVSS5.8AI score0.02063EPSS
SaveExploits0References5
OSV
OSV
added 2019/06/20 12:15 a.m.7 views

ALPINE-CVE-2019-12904

In Libgcrypt 1.8.4, the C implementation of AES is vulnerable to a flush-and-reload side-channel attack because physical addresses are available to other processes. The C implementation is used on platforms where an assembly-language implementation is unavailable. NOTE: the vendor's position is...

5.9CVSS6.5AI score0.02063EPSS
SaveExploits0References1
Prion
Prion
added 2019/06/20 12:15 a.m.19 views

Design/Logic Flaw

DISPUTED In Libgcrypt 1.8.4, the C implementation of AES is vulnerable to a flush-and-reload side-channel attack because physical addresses are available to other processes. The C implementation is used on platforms where an assembly-language implementation is unavailable. NOTE: the vendor's...

4.3CVSS5.6AI score0.02063EPSS
SaveExploits0References5Affected Software2
Rows per page
Query Builder