CVE-2021-3345

CVE-2021-3345 How to build vulnerable libgcrypt git clone --single-branch --branch LIBGCRYPT-1.9-BRANCH https://dev.gnupg.org/source/libgcrypt.git cd libgcrypt git checkout aa3f595341eb ./autogen.sh ./configure --enable-maintainer-mode && make How to use exploit make ./main This vulnerability is...

gpgsm-cve-2026-57062-cms-gcm-short-tag

gpgsm CVE-2026-57062: CMS AES-GCM short tag USN-8720-1 GnuPG's gpgsm the S/MIME and CMS tool derives the authentication tag length it verifies from the mac OCTET STRING in a CMS AuthEnvelopedData RFC 5083 AES-256-GCM message, and libgcrypt accepts tags as short as 4 bytes. RFC 5084 requires at...

PGP-client-checker-CVE-2021-33560

PGP client checker – CVE-2021-33560 This is a tool to check whether your OpenPGP client is affected by CVE-2021-33560. This vulnerability exposes to plaintext recovery the messages you encrypt to some ElGamal subkeys. The technical details of the vulnerability are described in this blog post and...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : Libgcrypt vulnerability (USN-8711-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8711-1 advisory. It was discovered that Libgcrypt had a timing-based side-channel flaw in its RSA implementation. A remote attacker could possibly use this...

MGASA-2026-0464 Updated libgcrypt package fixes a security vulnerability

Libgcrypt: vulnerable to marvin attack. CVE-2024-2236...

Updated libgcrypt package fixes a security vulnerability

Libgcrypt: vulnerable to marvin attack. CVE-2024-2236...

Rocky Linux 10.2 [CIQ] Security Update: libgcrypt / libgcrypt-debuginfo / libgcrypt-debugsource / etc (crlsa-2026_50144)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202650144 advisory. Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext CVE-2026-41989 Tenable has extracted the preceding description block...

Rocky Linux 8 [CIQ] Security Update: libgcrypt / libgcrypt-debuginfo / libgcrypt-debugsource / etc (crlsa-2026_47117)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202647117 advisory. Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext CVE-2026-41989 Tenable has extracted the preceding description block direct...

AlmaLinux 9.6 [TuxCare] Security Update: libgcrypt / libgcrypt-devel (ALMALINUX9.6:CLSA-2026:1784633299)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1784633299 advisory. - Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcrypkdecrypt...

Rocky Linux 8.10 [CIQ] Security Update: libgcrypt / libgcrypt-devel Multiple Vulnerabilities (ciqsa-2026_0639)

The Rocky Linux 8.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260639 advisory. This advisory aggregates security fixes for the libgcrypt SRPM in CIQ FIPS 8 Compliant. It addresses 2 CVEs: CVE-2016-6316, CVE-2021-33560. Tenable has...

Rocky Linux 8.6 [CIQ] Security Update: libgcrypt / libgcrypt-devel Multiple Vulnerabilities (ciqsa-2026_0591)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260591 advisory. This advisory aggregates security fixes for the libgcrypt SRPM in CIQ FIPS 8.6 Compliant. It addresses 2 CVEs: CVE-2016-6316, CVE-2021-33560. Tenable has...

Rocky Linux 9.2 [CIQ] Security Update: libgcrypt / libgcrypt-devel Multiple Vulnerabilities (ciqsa-2026_0622)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260622 advisory. This advisory aggregates security fixes for the libgcrypt SRPM in CIQ FIPS 9.2 Compliant. It addresses 2 CVEs: CVE-2016-6316, CVE-2021-33560. Tenable has...

Rocky Linux 9.2 [CIQ] Security Update: libgcrypt / libgcrypt-devel Multiple Vulnerabilities (ciqsa-2026_0778)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260778 advisory. This advisory aggregates security fixes for the libgcrypt SRPM in CIQ FIPS 9.2 Certified. It addresses 2 CVEs: CVE-2016-6316, CVE-2021-33560. Tenable has...

Rocky Linux 8 [CIQ] Security Update: libgcrypt / libgcrypt-debuginfo / libgcrypt-debugsource / etc (crlsa-2020_4482)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20204482 advisory. libgcrypt: ECDSA timing attack allowing private key leak CVE-2019-13627 Tenable has extracted the preceding description block directly from the CIQ security advisor...

Rocky Linux 8.10 [CIQ] Security Update: libgcrypt / libgcrypt-devel Multiple Vulnerabilities (ciqsa-2026_0604)

The Rocky Linux 8.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260604 advisory. This advisory aggregates security fixes for the libgcrypt SRPM in CIQ FIPS 8.10 Compliant. It addresses 2 CVEs: CVE-2016-6316, CVE-2021-33560. Tenable h...

CentOS Linux 7 [TuxCare] Security Update: libgcrypt / libgcrypt-devel Multiple Vulnerabilities (CENTOS7:CLSA-2023:1698945053)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2023:1698945053 advisory. - GnuPG 1.x before 1.4.16 generates RSA keys using sequences of introductions with certain patterns that introduce a side channel, which...

Rocky Linux 8 [CIQ] Security Update: libgcrypt / libgcrypt-debuginfo / libgcrypt-debugsource / etc (crlsa-2022_5311)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20225311 advisory. libgcrypt: ElGamal implementation allows plaintext recovery CVE-2021-40528 Tenable has extracted the preceding description block directly from the CIQ security...

AlmaLinux 9.2 [TuxCare] Security Update: libgcrypt / libgcrypt-devel (ALMALINUX9.2:CLSA-2026:1784632339)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1784632339 advisory. - Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcrypkdecrypt...

Rocky Linux 9 [CIQ] Security Update: libgcrypt / libgcrypt-debuginfo / libgcrypt-debugsource / etc (crlsa-2026_50147)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202650147 advisory. Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext CVE-2026-41989 Tenable has extracted the preceding description block direct...

Rocky Linux 9.6 [TuxCare] Security Update: libgcrypt / libgcrypt-devel (ALMALINUX9.6:CLSA-2026:1784633299)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1784633299 advisory. - Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcrypkdecrypt...