Поиск уязвимостей
Количество 21
Количество 21
ALT-PU-2014-1992
ALT-PU-2014-1992: package `libgcrypt` update to version 1.5.4-alt1
CVE-2014-5270
Libgcrypt before 1.5.4, as used in GnuPG and other products, does not properly perform ciphertext normalization and ciphertext randomization, which makes it easier for physically proximate attackers to conduct key-extraction attacks by leveraging the ability to collect voltage data from exposed metal, a different vector than CVE-2013-4576.
CVE-2014-5270
Libgcrypt before 1.5.4, as used in GnuPG and other products, does not properly perform ciphertext normalization and ciphertext randomization, which makes it easier for physically proximate attackers to conduct key-extraction attacks by leveraging the ability to collect voltage data from exposed metal, a different vector than CVE-2013-4576.
CVE-2014-5270
Libgcrypt before 1.5.4, as used in GnuPG and other products, does not properly perform ciphertext normalization and ciphertext randomization, which makes it easier for physically proximate attackers to conduct key-extraction attacks by leveraging the ability to collect voltage data from exposed metal, a different vector than CVE-2013-4576.
CVE-2014-5270
Libgcrypt before 1.5.4, as used in GnuPG and other products, does not ...
CVE-2016-6313
The mixing functions in the random number generator in Libgcrypt before 1.5.6, 1.6.x before 1.6.6, and 1.7.x before 1.7.3 and GnuPG before 1.4.21 make it easier for attackers to obtain the values of 160 bits by leveraging knowledge of the previous 4640 bits.
CVE-2016-6313
The mixing functions in the random number generator in Libgcrypt before 1.5.6, 1.6.x before 1.6.6, and 1.7.x before 1.7.3 and GnuPG before 1.4.21 make it easier for attackers to obtain the values of 160 bits by leveraging knowledge of the previous 4640 bits.
CVE-2016-6313
The mixing functions in the random number generator in Libgcrypt before 1.5.6, 1.6.x before 1.6.6, and 1.7.x before 1.7.3 and GnuPG before 1.4.21 make it easier for attackers to obtain the values of 160 bits by leveraging knowledge of the previous 4640 bits.
CVE-2016-6313
The mixing functions in the random number generator in Libgcrypt befor ...
GHSA-47gj-9v97-r4c7
Libgcrypt before 1.5.4, as used in GnuPG and other products, does not properly perform ciphertext normalization and ciphertext randomization, which makes it easier for physically proximate attackers to conduct key-extraction attacks by leveraging the ability to collect voltage data from exposed metal, a different vector than CVE-2013-4576.
BDU:2015-09792
Уязвимость операционной системы Gentoo Linux, позволяющая злоумышленнику нарушить конфиденциальность защищаемой информации
openSUSE-SU-2016:2423-1
Security update for libgcrypt
SUSE-SU-2016:2346-1
Security update for libgcrypt
SUSE-SU-2016:2345-1
Security update for libgcrypt
GHSA-44wq-cf78-w397
The mixing functions in the random number generator in Libgcrypt before 1.5.6, 1.6.x before 1.6.6, and 1.7.x before 1.7.3 and GnuPG before 1.4.21 make it easier for attackers to obtain the values of 160 bits by leveraging knowledge of the previous 4640 bits.
ELSA-2016-2674
ELSA-2016-2674: libgcrypt security update (MODERATE)
BDU:2019-01635
Уязвимость генератора псевдослучайных чисел библиотеки криптографии Libgcrypt, связанная с раскрытием информации, позволяющая нарушителю прогнозировать выходные данные
ALT-PU-2016-1864
ALT-PU-2016-1864: package `libgcrypt` update to version 1.6.6-alt1
ALT-PU-2016-1855
ALT-PU-2016-1855: package `gnupg` update to version 1.4.21-alt1
SUSE-SU-2017:2699-1
Security update for SLES 12 Docker image
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2014-1992 ALT-PU-2014-1992: package `libgcrypt` update to version 1.5.4-alt1 | CVSS3: 5.3 | около 12 лет назад | |
 | CVE-2014-5270 Libgcrypt before 1.5.4, as used in GnuPG and other products, does not properly perform ciphertext normalization and ciphertext randomization, which makes it easier for physically proximate attackers to conduct key-extraction attacks by leveraging the ability to collect voltage data from exposed metal, a different vector than CVE-2013-4576. | CVSS2: 2.1 | 1% Низкий | около 12 лет назад |
 | CVE-2014-5270 Libgcrypt before 1.5.4, as used in GnuPG and other products, does not properly perform ciphertext normalization and ciphertext randomization, which makes it easier for physically proximate attackers to conduct key-extraction attacks by leveraging the ability to collect voltage data from exposed metal, a different vector than CVE-2013-4576. | CVSS2: 1.9 | 1% Низкий | больше 12 лет назад |
 | CVE-2014-5270 Libgcrypt before 1.5.4, as used in GnuPG and other products, does not properly perform ciphertext normalization and ciphertext randomization, which makes it easier for physically proximate attackers to conduct key-extraction attacks by leveraging the ability to collect voltage data from exposed metal, a different vector than CVE-2013-4576. | CVSS2: 2.1 | 1% Низкий | около 12 лет назад |
| CVE-2014-5270 Libgcrypt before 1.5.4, as used in GnuPG and other products, does not ... | CVSS2: 2.1 | 1% Низкий | около 12 лет назад |
| CVE-2016-6313 The mixing functions in the random number generator in Libgcrypt before 1.5.6, 1.6.x before 1.6.6, and 1.7.x before 1.7.3 and GnuPG before 1.4.21 make it easier for attackers to obtain the values of 160 bits by leveraging knowledge of the previous 4640 bits. | CVSS3: 5.3 | 4% Низкий | почти 10 лет назад |
| CVE-2016-6313 The mixing functions in the random number generator in Libgcrypt before 1.5.6, 1.6.x before 1.6.6, and 1.7.x before 1.7.3 and GnuPG before 1.4.21 make it easier for attackers to obtain the values of 160 bits by leveraging knowledge of the previous 4640 bits. | CVSS3: 4.8 | 4% Низкий | около 10 лет назад |
| CVE-2016-6313 The mixing functions in the random number generator in Libgcrypt before 1.5.6, 1.6.x before 1.6.6, and 1.7.x before 1.7.3 and GnuPG before 1.4.21 make it easier for attackers to obtain the values of 160 bits by leveraging knowledge of the previous 4640 bits. | CVSS3: 5.3 | 4% Низкий | почти 10 лет назад |
| CVE-2016-6313 The mixing functions in the random number generator in Libgcrypt befor ... | CVSS3: 5.3 | 4% Низкий | почти 10 лет назад |
| GHSA-47gj-9v97-r4c7 Libgcrypt before 1.5.4, as used in GnuPG and other products, does not properly perform ciphertext normalization and ciphertext randomization, which makes it easier for physically proximate attackers to conduct key-extraction attacks by leveraging the ability to collect voltage data from exposed metal, a different vector than CVE-2013-4576. | 1% Низкий | больше 4 лет назад | |
 | BDU:2015-09792 Уязвимость операционной системы Gentoo Linux, позволяющая злоумышленнику нарушить конфиденциальность защищаемой информации | CVSS2: 2.1 | 1% Низкий | около 12 лет назад |
 | openSUSE-SU-2016:2423-1 Security update for libgcrypt | 4% Низкий | около 10 лет назад | |
| SUSE-SU-2016:2346-1 Security update for libgcrypt | 4% Низкий | около 10 лет назад | |
| SUSE-SU-2016:2345-1 Security update for libgcrypt | 4% Низкий | около 10 лет назад | |
| GHSA-44wq-cf78-w397 The mixing functions in the random number generator in Libgcrypt before 1.5.6, 1.6.x before 1.6.6, and 1.7.x before 1.7.3 and GnuPG before 1.4.21 make it easier for attackers to obtain the values of 160 bits by leveraging knowledge of the previous 4640 bits. | CVSS3: 5.3 | 4% Низкий | больше 4 лет назад |
| ELSA-2016-2674 ELSA-2016-2674: libgcrypt security update (MODERATE) | 4% Низкий | около 10 лет назад | |
| BDU:2019-01635 Уязвимость генератора псевдослучайных чисел библиотеки криптографии Libgcrypt, связанная с раскрытием информации, позволяющая нарушителю прогнозировать выходные данные | CVSS3: 5.3 | 4% Низкий | около 10 лет назад |
| ALT-PU-2016-1864 ALT-PU-2016-1864: package `libgcrypt` update to version 1.6.6-alt1 | CVSS3: 5.3 | 4% Низкий | около 10 лет назад |
| ALT-PU-2016-1855 ALT-PU-2016-1855: package `gnupg` update to version 1.4.21-alt1 | CVSS3: 5.3 | 4% Низкий | около 10 лет назад |
| SUSE-SU-2017:2699-1 Security update for SLES 12 Docker image | около 9 лет назад |
Уязвимостей на страницу