Поиск уязвимостей
Количество 47
Количество 47
ALT-PU-2018-2426
ALT-PU-2018-2426: package `libgcrypt` update to version 1.8.3-alt3
CVE-2017-0379
Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it easier for attackers to discover a secret key, related to cipher/ecc.c and mpi/ec.c.
CVE-2017-0379
Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it easier for attackers to discover a secret key, related to cipher/ecc.c and mpi/ec.c.
CVE-2017-0379
Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it easier for attackers to discover a secret key, related to cipher/ecc.c and mpi/ec.c.
CVE-2017-0379
Libgcrypt before 1.8.1 does not properly consider Curve25519 side-chan ...
GHSA-j848-fx94-98m4
Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it easier for attackers to discover a secret key, related to cipher/ecc.c and mpi/ec.c.
ALT-PU-2017-2224
ALT-PU-2017-2224: package `libgcrypt` update to version 1.7.9-alt1.S1
CVE-2017-7526
libgcrypt before version 1.7.8 is vulnerable to a cache side-channel attack resulting into a complete break of RSA-1024 while using the left-to-right method for computing the sliding-window expansion. The same attack is believed to work on RSA-2048 with moderately more computation. This side-channel requires that attacker can run arbitrary software on the hardware where the private RSA key is used.
CVE-2017-7526
libgcrypt before version 1.7.8 is vulnerable to a cache side-channel attack resulting into a complete break of RSA-1024 while using the left-to-right method for computing the sliding-window expansion. The same attack is believed to work on RSA-2048 with moderately more computation. This side-channel requires that attacker can run arbitrary software on the hardware where the private RSA key is used.
CVE-2017-7526
libgcrypt before version 1.7.8 is vulnerable to a cache side-channel attack resulting into a complete break of RSA-1024 while using the left-to-right method for computing the sliding-window expansion. The same attack is believed to work on RSA-2048 with moderately more computation. This side-channel requires that attacker can run arbitrary software on the hardware where the private RSA key is used.
CVE-2017-7526
libgcrypt before version 1.7.8 is vulnerable to a cache side-channel attack resulting into a complete break of RSA-1024 while using the left-to-right method for computing the sliding-window expansion. The same attack is believed to work on RSA-2048 with moderately more computation. This side-channel requires that attacker can run arbitrary software on the hardware where the private RSA key is used.
CVE-2017-7526
libgcrypt before version 1.7.8 is vulnerable to a cache side-channel a ...
openSUSE-SU-2017:1822-1
Security update for libgcrypt
SUSE-SU-2017:1866-1
Security update for compat-libgcrypt11
SUSE-SU-2017:1794-1
Security update for libgcrypt
SUSE-SU-2017:1793-1
Security update for libgcrypt
GHSA-f2v5-c455-qhg2
libgcrypt before version 1.7.8 is vulnerable to a cache side-channel attack resulting into a complete break of RSA-1024 while using the left-to-right method for computing the sliding-window expansion. The same attack is believed to work on RSA-2048 with moderately more computation. This side-channel requires that attacker can run arbitrary software on the hardware where the private RSA key is used.
BDU:2018-00007
Уязвимость библиотеки libgcrypt11, связанная с отсутствием защиты служебных данных, позволяющая нарушителю нарушить конфиденциальность данных
ALT-PU-2017-2769
ALT-PU-2017-2769: package `gnupg` update to version 1.4.22-alt1
ALT-PU-2017-1818
ALT-PU-2017-1818: package `libgcrypt` update to version 1.6.6-alt2.S1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2018-2426 ALT-PU-2018-2426: package `libgcrypt` update to version 1.8.3-alt3 | CVSS3: 7.5 | около 8 лет назад | |
 | CVE-2017-0379 Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it easier for attackers to discover a secret key, related to cipher/ecc.c and mpi/ec.c. | CVSS3: 7.5 | 4% Низкий | около 9 лет назад |
 | CVE-2017-0379 Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it easier for attackers to discover a secret key, related to cipher/ecc.c and mpi/ec.c. | CVSS3: 4.4 | 4% Низкий | около 9 лет назад |
 | CVE-2017-0379 Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it easier for attackers to discover a secret key, related to cipher/ecc.c and mpi/ec.c. | CVSS3: 7.5 | 4% Низкий | около 9 лет назад |
| CVE-2017-0379 Libgcrypt before 1.8.1 does not properly consider Curve25519 side-chan ... | CVSS3: 7.5 | 4% Низкий | около 9 лет назад |
| GHSA-j848-fx94-98m4 Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it easier for attackers to discover a secret key, related to cipher/ecc.c and mpi/ec.c. | CVSS3: 7.5 | 4% Низкий | больше 4 лет назад |
| ALT-PU-2017-2224 ALT-PU-2017-2224: package `libgcrypt` update to version 1.7.9-alt1.S1 | CVSS3: 7.5 | 4% Низкий | около 9 лет назад |
| CVE-2017-7526 libgcrypt before version 1.7.8 is vulnerable to a cache side-channel attack resulting into a complete break of RSA-1024 while using the left-to-right method for computing the sliding-window expansion. The same attack is believed to work on RSA-2048 with moderately more computation. This side-channel requires that attacker can run arbitrary software on the hardware where the private RSA key is used. | CVSS3: 6.8 | 4% Низкий | больше 8 лет назад |
| CVE-2017-7526 libgcrypt before version 1.7.8 is vulnerable to a cache side-channel attack resulting into a complete break of RSA-1024 while using the left-to-right method for computing the sliding-window expansion. The same attack is believed to work on RSA-2048 with moderately more computation. This side-channel requires that attacker can run arbitrary software on the hardware where the private RSA key is used. | CVSS3: 6.1 | 4% Низкий | больше 9 лет назад |
| CVE-2017-7526 libgcrypt before version 1.7.8 is vulnerable to a cache side-channel attack resulting into a complete break of RSA-1024 while using the left-to-right method for computing the sliding-window expansion. The same attack is believed to work on RSA-2048 with moderately more computation. This side-channel requires that attacker can run arbitrary software on the hardware where the private RSA key is used. | CVSS3: 6.8 | 4% Низкий | больше 8 лет назад |
 | CVE-2017-7526 libgcrypt before version 1.7.8 is vulnerable to a cache side-channel attack resulting into a complete break of RSA-1024 while using the left-to-right method for computing the sliding-window expansion. The same attack is believed to work on RSA-2048 with moderately more computation. This side-channel requires that attacker can run arbitrary software on the hardware where the private RSA key is used. | CVSS3: 6.1 | 4% Низкий | около 1 года назад |
| CVE-2017-7526 libgcrypt before version 1.7.8 is vulnerable to a cache side-channel a ... | CVSS3: 6.8 | 4% Низкий | больше 8 лет назад |
 | openSUSE-SU-2017:1822-1 Security update for libgcrypt | 4% Низкий | больше 9 лет назад | |
| SUSE-SU-2017:1866-1 Security update for compat-libgcrypt11 | 4% Низкий | больше 9 лет назад | |
| SUSE-SU-2017:1794-1 Security update for libgcrypt | 4% Низкий | больше 9 лет назад | |
| SUSE-SU-2017:1793-1 Security update for libgcrypt | 4% Низкий | больше 9 лет назад | |
| GHSA-f2v5-c455-qhg2 libgcrypt before version 1.7.8 is vulnerable to a cache side-channel attack resulting into a complete break of RSA-1024 while using the left-to-right method for computing the sliding-window expansion. The same attack is believed to work on RSA-2048 with moderately more computation. This side-channel requires that attacker can run arbitrary software on the hardware where the private RSA key is used. | CVSS3: 6.8 | 4% Низкий | больше 4 лет назад |
 | BDU:2018-00007 Уязвимость библиотеки libgcrypt11, связанная с отсутствием защиты служебных данных, позволяющая нарушителю нарушить конфиденциальность данных | CVSS3: 6.1 | 4% Низкий | больше 9 лет назад |
| ALT-PU-2017-2769 ALT-PU-2017-2769: package `gnupg` update to version 1.4.22-alt1 | CVSS3: 6.8 | 4% Низкий | почти 9 лет назад |
| ALT-PU-2017-1818 ALT-PU-2017-1818: package `libgcrypt` update to version 1.6.6-alt2.S1 | CVSS3: 6.8 | 4% Низкий | больше 9 лет назад |
Уязвимостей на страницу