Lucene search
+L

1203 matches found

osv_cve
osv_cve
•added 2017/08/29 10:29 p.m.•26 views

CVE-2017-0379

Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it easier for attackers to discover a secret key, related to cipher/ecc.c and mpi/ec.c...

7.5CVSS7.4AI score0.0351EPSS
SaveExploits0References11
osv_debian
osv_debian
•added 2017/08/29 10:29 p.m.•5 views

DEBIAN-CVE-2017-0379

Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it easier for attackers to discover a secret key, related to cipher/ecc.c and mpi/ec.c...

7.5CVSS8.9AI score0.0351EPSS
SaveExploits0References1
Prion
Prion
•added 2017/08/29 10:29 p.m.•23 views

Design/Logic Flaw

Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it easier for attackers to discover a secret key, related to cipher/ecc.c and mpi/ec.c...

5CVSS7.3AI score0.0351EPSS
SaveExploits0References11Affected Software2
NVD
NVD
•added 2017/08/29 10:29 p.m.•22 views

CVE-2017-0379

Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it easier for attackers to discover a secret key, related to cipher/ecc.c and mpi/ec.c...

7.5CVSS7.4AI score0.0351EPSS
SaveExploits0References11
Cvelist
Cvelist
•added 2017/08/29 10:00 p.m.•47 views

CVE-2017-0379

Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it easier for attackers to discover a secret key, related to cipher/ecc.c and mpi/ec.c...

6.4AI score0.0351EPSS
SaveExploits0References11
Mend
Mend
•added 2017/08/29 10:00 p.m.•5 views

CVE-2017-0379

Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it easier for attackers to discover a secret key, related to cipher/ecc.c and mpi/ec.c...

8.7CVSS0.0351EPSS
SaveExploits0References12
Debian CVE
Debian CVE
•added 2017/08/29 10:00 p.m.•62 views

CVE-2017-0379

Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it easier for attackers to discover a secret key, related to cipher/ecc.c and mpi/ec.c...

7.5CVSS6.6AI score0.0351EPSS
SaveExploits0
CVE
CVE
•added 2017/08/29 10:00 p.m.•172 views

CVE-2017-0379

CVE-2017-0379 affects libgcrypt before 1.8.1, where Curve25519 side-channel attacks could allow a local attacker to recover a secret key. Public advisories indicate the flaw in cipher/ecc.c and mpi/ec.c can enable private-key recovery on multi-user systems or VMs. Remediation is to upgrade to lib...

7.5CVSS7.3AI score0.0351EPSS
SaveExploits0References11Affected Software1
AlpineLinux
AlpineLinux
•added 2017/08/29 10:00 p.m.•83 views

CVE-2017-0379

Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it easier for attackers to discover a secret key, related to cipher/ecc.c and mpi/ec.c...

7.5CVSS6.6AI score0.0351EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/08/29 12:00 a.m.•9 views

CVE-2017-0379: Exposure of Sensitive Information to an Unauthorized Actor

Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it easier for attackers to discover a secret key, related to cipher/ecc.c and mpi/ec.c...

7.5CVSS5.9AI score0.0351EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2017/08/29 12:00 a.m.•30 views

CVE-2017-0379

Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it easier for attackers to discover a secret key, related to cipher/ecc.c and mpi/ec.c...

7.5CVSS7.1AI score0.0351EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2017/08/29 12:00 a.m.•7 views

PT-2017-10555

Name of the Vulnerable Software and Affected Versions Libgcrypt versions prior to 1.8.1 Description The issue makes it easier for attackers to discover a secret key due to not properly considering Curve25519 side-channel attacks, related to files cipher/ecc.c and mpi/ec.c. Recommendations For...

7.5CVSS0.0351EPSS
SaveExploits0References44
RedhatCVE
RedhatCVE
•added 2017/08/28 12:48 p.m.•36 views

CVE-2017-0379

Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it easier for attackers to discover a secret key, related to cipher/ecc.c and mpi/ec.c...

7.5CVSS3.9AI score0.0351EPSS
SaveExploits0References1
Cloud Foundry
Cloud Foundry
•added 2017/08/04 12:00 a.m.•113 views

USN-3347-1: Libgcrypt vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 Description Daniel J. Bernstein, Joachim Breitner, Daniel Genkin, Leon Groot Bruinderink, Nadia Heninger, Tanja Lange, Christine van Vredendaal, and Yuval Yarom discovered that Libgcrypt was susceptible to an attack...

6.8CVSS6.7AI score0.03835EPSS
SaveExploits0
osv_mgasa
osv_mgasa
•added 2017/07/22 9:36 a.m.•18 views

MGASA-2017-0213 Updated libgcrypt packages fix security vulnerability

Daniel J. Bernstein, Joachim Breitner, Daniel Genkin, Leon Groot Bruinderink, Nadia Heninger, Tanja Lange, Christine van Vredendaal, and Yuval Yarom discovered that Libgcrypt was susceptible to an attack via side channels. A local attacker could use this attack to recover RSA private keys...

6.8CVSS6.6AI score0.03835EPSS
SaveExploits0References3
Mageia
Mageia
•added 2017/07/22 9:36 a.m.•41 views

Updated libgcrypt packages fix security vulnerability

Daniel J. Bernstein, Joachim Breitner, Daniel Genkin, Leon Groot Bruinderink, Nadia Heninger, Tanja Lange, Christine van Vredendaal, and Yuval Yarom discovered that Libgcrypt was susceptible to an attack via side channels. A local attacker could use this attack to recover RSA private keys...

6.8CVSS2.1AI score0.03835EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2017/07/21 12:00 a.m.•42 views

Fedora 24 : libgcrypt (2017-3b70d0b976)

New upstream release fixing moderate security issue CVE-2017-7526. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

6.8CVSS6.6AI score0.03835EPSS
SaveExploits0References2
Ubuntu
Ubuntu
•added 2017/07/17 2:17 p.m.•67 views

USN-3347-2: Libgcrypt vulnerability

USN-3347-1 fixed a vulnerability in Libgcrypt. This update provides the corresponding update for Ubuntu 12.04 ESM. Original advisory details: Daniel J. Bernstein, Joachim Breitner, Daniel Genkin, Leon Groot Bruinderink, Nadia Heninger, Tanja Lange, Christine van Vredendaal, and Yuval Yarom...

6.8CVSS6.6AI score0.03835EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2017/07/17 12:00 a.m.•15 views

Fedora 26 : libgcrypt (2017-0343b2d324)

Minor update from upstream fixing low impact security issue. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing addition...

5.4AI score
SaveExploits0References1
OpenVAS
OpenVAS
•added 2017/07/16 12:00 a.m.•35 views

Fedora Update for libgcrypt FEDORA-2017-3b70d0b976

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8CVSS7.2AI score0.03835EPSS
SaveExploits0References2
Rows per page
Query Builder