1076 matches found
The vulnerability of the Red Hat Enterprise Linux operating system, which allows a malicious individual to compromise the confidentiality of protected information
The vulnerability of the libgcrypt-1.4.5 package in the Red Hat Enterprise Linux operating system can lead to a violation of the confidentiality of protected information. This vulnerability can be exploited locally...
The vulnerability of the Red Hat Enterprise Linux operating system, which allows a malicious individual to compromise the confidentiality of protected information
The vulnerability of the libgcrypt-debuginfo-1.4.4 package of the Red Hat Enterprise Linux operating system can lead to a violation of the confidentiality of protected information. Exploitation of this vulnerability can be carried out locally...
The vulnerability of the Red Hat Enterprise Linux operating system, which allows a malicious individual to compromise the confidentiality of protected information
The vulnerability of the libgcrypt-debuginfo-1.4.5 package of the Red Hat Enterprise Linux operating system can lead to a violation of the confidentiality of protected information. Exploitation of this vulnerability can be carried out locally...
Libgcrypt Local Information Disclosure Vulnerability
Libgcrypt is a general-purpose cryptographic library based on the GnuPG code. The library implements a variety of cryptographic algorithms, including symmetric ciphers, hashing algorithms, public key algorithms, and more. A local information disclosure vulnerability exists in versions of Libgcryp...
GnuPG / libgcrypt multiple security vulnerabilities
Use-after-free, backside channels information disclosure...
Ubuntu: Security Advisory (USN-2555-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 14.04 LTS : Libgcrypt vulnerabilities (USN-2555-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2555-1 advisory. Daniel Genkin, Lev Pachmanov, Itamar Pipman, and Eran Tromer discovered that Libgcrypt was susceptible to an attack via physical side channels. A local...
USN-2555-1 libgcrypt11, libgcrypt20 vulnerabilities
Daniel Genkin, Lev Pachmanov, Itamar Pipman, and Eran Tromer discovered that Libgcrypt was susceptible to an attack via physical side channels. A local attacker could use this attack to possibly recover private keys. CVE-2014-3591 Daniel Genkin, Adi Shamir, and Eran Tromer discovered that Libgcry...
USN-2555-1: Libgcrypt vulnerabilities
Daniel Genkin, Lev Pachmanov, Itamar Pipman, and Eran Tromer discovered that Libgcrypt was susceptible to an attack via physical side channels. A local attacker could use this attack to possibly recover private keys. CVE-2014-3591 Daniel Genkin, Adi Shamir, and Eran Tromer discovered that Libgcry...
Mandriva Linux Security Advisory : gnupg (MDVSA-2015:155)
Updated gnupg and libgcrypt packages fix security vulnerabilities : GnuPG before 1.4.19 is vulnerable to a side-channel attack which can potentially lead to an information leak CVE-2014-3591. GnuPG before 1.4.19 is vulnerable to a side-channel attack on data-dependent timing variations in modular...
Mandriva Linux Security Advisory : gnupg (MDVSA-2015:154)
Updated gnupg, gnupg2 and libgcrypt packages fix security vulnerabilities : GnuPG versions before 1.4.17 and 2.0.24 are vulnerable to a denial of service which can be caused by garbled compressed data packets which may put gpg into an infinite loop CVE-2014-4617. The libgcrypt library before...
Fedora 21 : libgcrypt-1.6.3-1.fc21 (2015-3489)
New upstream release fixing two minor security issues. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Fedora Update for libgcrypt FEDORA-2015-3489
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 21 Update: libgcrypt-1.6.3-1.fc21
Libgcrypt is a general purpose crypto library based on the code used in GNU Privacy Guard. This is a development version...
Fedora 22 : libgcrypt-1.6.3-1.fc22 (2015-3399)
New upstream release fixing two minor security issues. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
[SECURITY] Fedora 22 Update: libgcrypt-1.6.3-1.fc22
Libgcrypt is a general purpose crypto library based on the code used in GNU Privacy Guard. This is a development version...
Debian Security Advisory DSA 3185-1 (libgcrypt11 - security update)
Multiple vulnerabilities were discovered in libgcrypt: CVE-2014-3591 The Elgamal decryption routine was susceptible to a side-channel attack discovered by researchers of Tel Aviv University. Ciphertext blinding was enabled to counteract it. Note that this may have a quite noticeable impact on...
Updated gnupg and libgcrypt packages fix security vulnerabilities
GnuPG before 1.4.19 is vulnerable to a side-channel attack which can potentially lead to an information leak CVE-2014-3591. GnuPG before 1.4.19 is vulnerable to a side-channel attack on data-dependent timing variations in modular exponentiation, which can potentially lead to an information leak...
MGASA-2015-0104 Updated gnupg and libgcrypt packages fix security vulnerabilities
GnuPG before 1.4.19 is vulnerable to a side-channel attack which can potentially lead to an information leak CVE-2014-3591. GnuPG before 1.4.19 is vulnerable to a side-channel attack on data-dependent timing variations in modular exponentiation, which can potentially lead to an information leak...
CVE-2015-0837
The mpipowm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timing differences when accessing a pre-computed table during modular exponentiation, related to a "Last-Level Cache Side-Channel Attack."...