1090 matches found
gpgsm-cve-2026-57062-cms-gcm-short-tag
gpgsm CVE-2026-57062: CMS AES-GCM 짧은 태그 USN-8720-1 GnuPG의 gpgsmS/MIME 및 CMS 도구은 CMS AuthEnvelopedDataRFC 5083 AES-256-GCM 메시지의 mac OCTET STRING에서 검증하는 인증 태그 길이를 파생하며, libgcrypt는 4바이트만큼 짧은 태그도 허용합니다. RFC 5084는 최소 12바이트를 요구합니다. Ubuntu는 noble gnupg2 2.4.4-2ubuntu17.6에서 12옥텟보다 짧은 authtag를 거부하도록 수정했습니...
CVE-2021-3345
CVE-2021-3345 취약한 libgcrypt 빌드 방법 root@kitploit: git clone --single-branch --branch LIBGCRYPT-1.9-BRANCH https://dev.gnupg.org/source/libgcrypt.git cd libgcrypt git checkout aa3f595341eb ./autogen.sh ./configure --enable-maintainer-mode && make 익스플로잇 사용 방법 root@kitploit: make ./main 이 취약점은 그다지 흥미...
PGP-client-checker-CVE-2021-33560
PGP 클라이언트 체커 – CVE-2021-33560 이 도구는 사용자의 OpenPGP 클라이언트가 CVE-2021-33560의 영향을 받는지 확인하기 위한 것입니다. 이 취약점은 일부 ElGamal 하위 키subkey로 암호화한 메시지가 평문 복구에 노출되게 합니다. 취약점의 기술적 세부 사항은 이 블로그 게시물과 이 연구 논문에 설명되어 있습니다. 이 도구는 사용자의 OpenPGP 클라이언트가 송신자sender로서 영향을 받는지 테스트합니다. ElGamal 하위 키가 수신자recipient로서 영향을 받는지는 알려주지...
RHSA-2026:58979 Red Hat Security Advisory: libgcrypt security update
Bulletin has no description...
RHSA-2026:58978 Red Hat Security Advisory: libgcrypt security update
Bulletin has no description...
RHSA-2026:58977 Red Hat Security Advisory: libgcrypt security update
Bulletin has no description...
Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext
A flaw was found in Libgcrypt. A remote attacker could exploit this vulnerability by sending crafted Elliptic Curve Diffie-Hellman ECDH ciphertext to the gcrypkdecrypt function. This can lead to a heap-based buffer overflow, potentially causing a denial of service DoS condition...
Moderate: Red Hat Security Advisory: libgcrypt security update
An update for libgcrypt is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring...
Moderate: Red Hat Security Advisory: libgcrypt security update
An update for libgcrypt is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common...
Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext
A flaw was found in Libgcrypt. A remote attacker could exploit this vulnerability by sending crafted Elliptic Curve Diffie-Hellman ECDH ciphertext to the gcrypkdecrypt function. This can lead to a heap-based buffer overflow, potentially causing a denial of service DoS condition...
Moderate: Red Hat Security Advisory: libgcrypt security update
An update for libgcrypt is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common...
Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext
A flaw was found in Libgcrypt. A remote attacker could exploit this vulnerability by sending crafted Elliptic Curve Diffie-Hellman ECDH ciphertext to the gcrypkdecrypt function. This can lead to a heap-based buffer overflow, potentially causing a denial of service DoS condition...
Astra Linux – Vulnerability in libgcrypt20
The ElGamal implementation in Libgcrypt before version 1.9.4 allows plaintext recovery. This occurs because, during interaction between two cryptographic libraries, a dangerous combination of elements arises—specifically, the prime number defined by the receiver’s public key, the generator define...
ANT-2026-GSPVGEYA · gpg/libgcrypt · Stack Buffer Overflow
stack-buffer-overflow medium CVE-2026-41990 GHSA-78pv-qq8x-94px Severity Claude high · Security research firm - · Maintainer medium Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Calif. ANT-2026-GSPVGEYA: ML-DSA...
RHSA-2026:47117 Red Hat Security Advisory: libgcrypt security update
Bulletin has no description...
libgcrypt security update
An update is available for libgcrypt. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libgcrypt library provides general-purpose implementations of various...
Moderate: Red Hat Security Advisory: libgcrypt security update
An update for libgcrypt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext
A flaw was found in Libgcrypt. A remote attacker could exploit this vulnerability by sending crafted Elliptic Curve Diffie-Hellman ECDH ciphertext to the gcrypkdecrypt function. This can lead to a heap-based buffer overflow, potentially causing a denial of service DoS condition...