Lucene search
Veracode Vulnerability DatabaseVERACODE:22096HistoryDec 04, 2019 - 6:58 a.m.
Side Channel Attack
2019-12-0406:58:14
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
0.001 Low
EPSS
Percentile
41.4%
libgcrypt.so is vulnerable to side-channel attack. The vulnerability exists as the library fails to perform ciphertext blinding for the Elgamal decryption, allowing a local attacker to compromise the server’s private key through a crafted ciphertext and analyzing the fluctuations in the electromagnetic field during multiplication.
| CPE | Name | Operator | Version |
|---|---|---|---|
| libgcrypt.so | le | 11.8.2 |
Related
nessus
nessus
SUSE SLED12 / SLES12 Security Update : libgcrypt (SUSE-SU-2015:1179-1)
2015-07-06 00:00:00
EulerOS 2.0 SP5 : libgcrypt (EulerOS-SA-2019-2695)
2019-12-23 00:00:00
Fedora 22 : gnupg-1.4.19-1.fc22 (2015-2872)
2015-03-17 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for libgcrypt (EulerOS-SA-2019-2695)
2020-01-23 00:00:00
SUSE: Security Advisory (SUSE-SU-2015:1179-1)
2021-04-19 00:00:00
Fedora Update for libgcrypt FEDORA-2015-3489
2015-03-19 00:00:00
nvd
nvd
CVE-2014-3591
2019-11-29 22:15:11
CVE-2015-3591
2016-02-25 11:59:00
prion
prion
Code injection
2019-11-29 22:15:00
debiancve
debiancve
CVE-2014-3591
2019-11-29 22:15:11
cve
cve
CVE-2014-3591
2019-11-29 22:15:11
CVE-2015-3591
2016-02-25 11:59:00
ubuntucve
ubuntucve
CVE-2014-3591
2014-12-31 00:00:00
cvelist
cvelist
CVE-2014-3591
2019-11-29 21:02:23
debian
debian
[SECURITY] [DLA 190-1] libgcrypt11 security update
2015-04-09 10:44:31
[SECURITY] [DSA 3185-1] libgcrypt11 security update
2015-03-12 17:53:56
[SECURITY] [DSA 3184-1] gnupg security update
2015-03-12 17:50:45
fedora
fedora
[SECURITY] Fedora 22 Update: libgcrypt-1.6.3-1.fc22
2015-03-13 17:02:02
[SECURITY] Fedora 21 Update: libgcrypt-1.6.3-1.fc21
2015-03-18 10:23:58
[SECURITY] Fedora 22 Update: mingw-libgcrypt-1.6.3-1.fc22
2015-05-01 16:50:20
mageia
mageia
Updated gnupg and libgcrypt packages fix security vulnerabilities
2015-03-10 19:48:25
osv
osv
libgcrypt11 - security update
2015-03-12 00:00:00
libgcrypt11 - security update
2015-04-09 00:00:00
gnupg - security update
2015-03-17 00:00:00
ubuntu
ubuntu
Libgcrypt vulnerabilities
2015-04-01 00:00:00
GnuPG vulnerabilities
2015-04-01 00:00:00
slackware
slackware
[slackware-security] gnupg
2015-04-22 01:20:04
gentoo
gentoo
GnuPG: Multiple vulnerabilities
2016-06-05 00:00:00
libgcrypt: Multiple vulnerabilities
2016-10-10 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 3184-1] gnupg security update
2015-03-15 00:00:00
GnuPG / libgcrypt multiple security vulnerabilities
2015-04-09 00:00:00
[USN-2554-1] GnuPG vulnerabilities
2015-04-09 00:00:00
amazon
amazon
Medium: libgcrypt
2015-08-04 17:43:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1870
2021-07-02 17:14:28