Lucene search
+L

1203 matches found

osv_suse
osv_suse
•added 2018/07/19 7:28 a.m.•19 views

SUSE-SU-2018:1993-1 Security update for libgcrypt

This update for libgcrypt fixes the following issue: The following security issue was fixed: - CVE-2018-0495: Fixed a novel side-channel attack, by enabling blinding for ECDSA signatures bsc1097410...

4.7CVSS6.1AI score0.00869EPSS
SaveExploits1References3
Cloud Foundry
Cloud Foundry
•added 2018/07/10 12:00 a.m.•350 views

USN-3689-1: Libgcrypt vulnerability | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 Description Affected Cloud Foundry Products and Versions Severity is medium unless otherwise noted. Cloud Foundry BOSH stemcells are vulnerable, including: 3586.x versions prior to 3586.25 3541.x versions prior to...

4.7CVSS6AI score0.00869EPSS
SaveExploits1
osv_mgasa
osv_mgasa
•added 2018/07/01 10:17 p.m.•18 views

MGASA-2018-0306 Updated libcrypt packages fix a security vulnerability

Updated libgcrypt packages fix security vulnerability: When libgcrypt uses the private key to create a signature, such as for a TLS or SSH connection, it inadvertently leaks information through memory caches. An unprivileged attacker running on the same machine can collect the information from a...

4.7CVSS6AI score0.00869EPSS
SaveExploits1References4
Mageia
Mageia
•added 2018/07/01 10:17 p.m.•56 views

Updated libcrypt packages fix a security vulnerability

Updated libgcrypt packages fix security vulnerability: When libgcrypt uses the private key to create a signature, such as for a TLS or SSH connection, it inadvertently leaks information through memory caches. An unprivileged attacker running on the same machine can collect the information from a...

4.7CVSS2.6AI score0.00869EPSS
SaveExploits1References3
osv_mgasa
osv_mgasa
•added 2018/07/01 5:17 p.m.•23 views

MGASA-2018-0301 Updated libgcrypt packages fix security vulnerability

When libgcrypt uses the private key to create a signature, such as for a TLS or SSH connection, it inadvertently leaks information through memory caches. An unprivileged attacker running on the same machine can collect the information from a few thousand signatures and recover the value of the...

4.7CVSS5.9AI score0.00869EPSS
SaveExploits1References4
Mageia
Mageia
•added 2018/07/01 5:17 p.m.•76 views

Updated libgcrypt packages fix security vulnerability

When libgcrypt uses the private key to create a signature, such as for a TLS or SSH connection, it inadvertently leaks information through memory caches. An unprivileged attacker running on the same machine can collect the information from a few thousand signatures and recover the value of the...

4.7CVSS2.7AI score0.00869EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2018/06/20 12:00 a.m.•51 views

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Libgcrypt vulnerability (USN-3689-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3689-1 advisory. Keegan Ryan discovered that Libgcrypt was susceptible to a side-channel attack. A local attacker could possibly use this attack to recover...

4.7CVSS6.5AI score0.00869EPSS
SaveExploits1References2
Ubuntu
Ubuntu
•added 2018/06/19 5:35 p.m.•85 views

USN-3689-2: Libgcrypt vulnerability

USN-3689-1 fixed a vulnerability in Libgcrypt. This update provides the corresponding update for Ubuntu 12.04 ESM. Original advisory details: Keegan Ryan discovered that Libgcrypt was susceptible to a side-channel attack. A local attacker could possibly use this attack to recover ECDSA private ke...

4.7CVSS6.2AI score0.00869EPSS
SaveExploits1
Ubuntu
Ubuntu
•added 2018/06/19 3:17 p.m.•75 views

USN-3689-1: Libgcrypt vulnerability

Keegan Ryan discovered that Libgcrypt was susceptible to a side-channel attack. A local attacker could possibly use this attack to recover ECDSA private keys...

4.7CVSS6.2AI score0.00869EPSS
SaveExploits1
osv_usn
osv_usn
•added 2018/06/19 3:17 p.m.•12 views

USN-3689-1 libgcrypt11, libgcrypt20 vulnerability

Keegan Ryan discovered that Libgcrypt was susceptible to a side-channel attack. A local attacker could possibly use this attack to recover ECDSA private keys...

4.7CVSS6.4AI score0.00869EPSS
SaveExploits1References2
CNVD
CNVD
•added 2018/06/19 12:00 a.m.•7 views

Libgcrypt Information Disclosure Vulnerability

Libgcrypt is a general-purpose cryptographic library developed by the GNU Project based on the GnuPG code. The library implements a variety of cryptographic algorithms, including symmetric ciphers, hashing algorithms, public key algorithms, and more. There is a security vulnerability in Libgcrypt...

4.7CVSS5.6AI score0.00869EPSS
SaveExploits1References1
OpenVAS
OpenVAS
•added 2018/06/19 12:00 a.m.•31 views

Fedora Update for libgcrypt FEDORA-2018-1ea5beb4cf

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.7CVSS6.3AI score0.00869EPSS
SaveExploits1References2
Fedora
Fedora
•added 2018/06/18 4:20 p.m.•42 views

[SECURITY] Fedora 28 Update: libgcrypt-1.8.3-1.fc28

Libgcrypt is a general purpose crypto library based on the code used in GNU Privacy Guard. This is a development version...

4.7CVSS2.5AI score0.00869EPSS
SaveExploits1
Fedora
Fedora
•added 2018/06/18 3:17 p.m.•46 views

[SECURITY] Fedora 27 Update: libgpg-error-1.31-1.fc27

This is a library that defines common error values for all GnuPG components. Among these are GPG, GPGSM, GPGME, GPG-Agent, libgcrypt, pinentry, SmartCard Daemon and possibly more in the future...

7.5CVSS1.7AI score0.08247EPSS
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
•added 2018/06/18 1:38 a.m.•41 views

Security Bulletin: A vulnerability in libgcrypt affects IBM Flex System Manager (FSM) (CVE-2017-7526)

Summary A vulnerability has been discovered in libgcrypt that is embedded in FSM. This bulletin addresses that issue. Vulnerability Details CVEID: CVE-2017-7526 DESCRIPTION: Libgcrypt could allow a remote attacker to obtain sensitive information, caused by a cache side-channel attack when using...

6.8CVSS1.3AI score0.03835EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2018/06/18 1:34 a.m.•38 views

Security Bulletin: IBM Flex System Manager (FSM) is affected by a libgcrypt vulnerability (CVE-2016-6313)

Summary A security vulnerability has been identified in libgcrypt that is embedded in IBM FSM. This bulletin addresses this issue. Vulnerability Details CVEID: CVE-2016-6313 DESCRIPTION: GnuPG could provide weaker than expected security, caused by an error in the mixing functions when obtaining...

5.3CVSS0.4AI score0.03597EPSS
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
•added 2018/06/18 12:00 a.m.•40 views

Fedora 27 : libgcrypt (2018-6788454ab6)

Minor security update to version 1.8.3 from upstream. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

4.7CVSS6AI score0.00869EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2018/06/18 12:00 a.m.•27 views

Fedora Update for libgcrypt FEDORA-2018-6788454ab6

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.7CVSS6.3AI score0.00869EPSS
SaveExploits1References2
Fedora
Fedora
•added 2018/06/17 7:45 p.m.•50 views

[SECURITY] Fedora 27 Update: libgcrypt-1.8.3-1.fc27

Libgcrypt is a general purpose crypto library based on the code used in GNU Privacy Guard. This is a development version...

4.7CVSS2.5AI score0.00869EPSS
SaveExploits1
Debian
Debian
•added 2018/06/17 6:53 p.m.•59 views

[SECURITY] [DSA 4231-1] libgcrypt20 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4231-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 17, 2018 https://www.debian.org/security/faq -...

4.7CVSS5.9AI score0.00869EPSS
SaveExploits1
Rows per page
Query Builder