Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2017-0379

Опубликовано: 29 авг. 2017
Источник: ubuntu
Приоритет: medium
CVSS2: 5
CVSS3: 7.5

Описание

Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it easier for attackers to discover a secret key, related to cipher/ecc.c and mpi/ec.c.

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

not-affected

code not present
precise/esm

not-affected

code not present
trusty

not-affected

code not present
trusty/esm

not-affected

code not present
upstream

needs-triage

vivid/ubuntu-core

DNE

xenial

DNE

zesty

DNE

Показывать по

РелизСтатусПримечание
devel

released

1.7.8-2ubuntu1
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was not-affected [code not present]]
esm-infra/xenial

not-affected

code not present
precise/esm

DNE

trusty

not-affected

code not present
trusty/esm

DNE

trusty was not-affected [code not present]
upstream

released

1.7.9-1
vivid/ubuntu-core

not-affected

code not present
xenial

not-affected

code not present
zesty

released

1.7.6-1ubuntu0.2

Показывать по

5 Medium

CVSS2

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 4.4
redhat
больше 8 лет назад

Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it easier for attackers to discover a secret key, related to cipher/ecc.c and mpi/ec.c.

CVSS3: 7.5
nvd
больше 8 лет назад

Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it easier for attackers to discover a secret key, related to cipher/ecc.c and mpi/ec.c.

CVSS3: 7.5
debian
больше 8 лет назад

Libgcrypt before 1.8.1 does not properly consider Curve25519 side-chan ...

CVSS3: 7.5
github
больше 3 лет назад

Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it easier for attackers to discover a secret key, related to cipher/ecc.c and mpi/ec.c.

5 Medium

CVSS2

7.5 High

CVSS3