Поиск уязвимостей
Количество 23
Количество 23
ALT-PU-2019-2588
ALT-PU-2019-2588: package `libgcrypt` update to version 1.8.5-alt1
CVE-2019-12904
In Libgcrypt 1.8.4, the C implementation of AES is vulnerable to a flush-and-reload side-channel attack because physical addresses are available to other processes. (The C implementation is used on platforms where an assembly-language implementation is unavailable.) NOTE: the vendor's position is that the issue report cannot be validated because there is no description of an attack
CVE-2019-12904
In Libgcrypt 1.8.4, the C implementation of AES is vulnerable to a flush-and-reload side-channel attack because physical addresses are available to other processes. (The C implementation is used on platforms where an assembly-language implementation is unavailable.) NOTE: the vendor's position is that the issue report cannot be validated because there is no description of an attack
CVE-2019-12904
In Libgcrypt 1.8.4, the C implementation of AES is vulnerable to a flush-and-reload side-channel attack because physical addresses are available to other processes. (The C implementation is used on platforms where an assembly-language implementation is unavailable.) NOTE: the vendor's position is that the issue report cannot be validated because there is no description of an attack
CVE-2019-12904
In Libgcrypt 1.8.4, the C implementation of AES is vulnerable to a flu ...
CVE-2019-13627
It was discovered that there was a ECDSA timing attack in the libgcrypt20 cryptographic library. Version affected: 1.8.4-5, 1.7.6-2+deb9u3, and 1.6.3-2+deb8u4. Versions fixed: 1.8.5-2 and 1.6.3-2+deb8u7.
CVE-2019-13627
It was discovered that there was a ECDSA timing attack in the libgcrypt20 cryptographic library. Version affected: 1.8.4-5, 1.7.6-2+deb9u3, and 1.6.3-2+deb8u4. Versions fixed: 1.8.5-2 and 1.6.3-2+deb8u7.
CVE-2019-13627
It was discovered that there was a ECDSA timing attack in the libgcrypt20 cryptographic library. Version affected: 1.8.4-5, 1.7.6-2+deb9u3, and 1.6.3-2+deb8u4. Versions fixed: 1.8.5-2 and 1.6.3-2+deb8u7.
CVE-2019-13627
It was discovered that there was a ECDSA timing attack in the libgcrypt20 cryptographic library. Version affected: 1.8.4-5, 1.7.6-2+deb9u3, and 1.6.3-2+deb8u4. Versions fixed: 1.8.5-2 and 1.6.3-2+deb8u7.
CVE-2019-13627
It was discovered that there was a ECDSA timing attack in the libgcryp ...
openSUSE-SU-2019:1792-1
Security update for libgcrypt
SUSE-SU-2019:1971-1
Security update for libgcrypt
SUSE-SU-2019:1859-1
Security update for libgcrypt
GHSA-w862-39x5-q88x
In Libgcrypt 1.8.4, the C implementation of AES is vulnerable to a flush-and-reload side-channel attack because physical addresses are available to other processes. (The C implementation is used on platforms where an assembly-language implementation is unavailable.)
openSUSE-SU-2020:0022-1
Security update for libgcrypt
openSUSE-SU-2019:2161-1
Security update for libgcrypt
SUSE-SU-2019:3392-1
Security update for libgcrypt
SUSE-SU-2019:2510-1
Security update for libgcrypt
SUSE-SU-2019:2349-1
Security update for libgcrypt
RLSA-2020:4482
Moderate: libgcrypt security, bug fix, and enhancement update
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2019-2588 ALT-PU-2019-2588: package `libgcrypt` update to version 1.8.5-alt1 | CVSS3: 6.3 | около 7 лет назад | |
 | CVE-2019-12904 In Libgcrypt 1.8.4, the C implementation of AES is vulnerable to a flush-and-reload side-channel attack because physical addresses are available to other processes. (The C implementation is used on platforms where an assembly-language implementation is unavailable.) NOTE: the vendor's position is that the issue report cannot be validated because there is no description of an attack | CVSS3: 5.9 | 2% Низкий | больше 7 лет назад |
 | CVE-2019-12904 In Libgcrypt 1.8.4, the C implementation of AES is vulnerable to a flush-and-reload side-channel attack because physical addresses are available to other processes. (The C implementation is used on platforms where an assembly-language implementation is unavailable.) NOTE: the vendor's position is that the issue report cannot be validated because there is no description of an attack | CVSS3: 5.9 | 2% Низкий | больше 7 лет назад |
 | CVE-2019-12904 In Libgcrypt 1.8.4, the C implementation of AES is vulnerable to a flush-and-reload side-channel attack because physical addresses are available to other processes. (The C implementation is used on platforms where an assembly-language implementation is unavailable.) NOTE: the vendor's position is that the issue report cannot be validated because there is no description of an attack | CVSS3: 5.9 | 2% Низкий | больше 7 лет назад |
| CVE-2019-12904 In Libgcrypt 1.8.4, the C implementation of AES is vulnerable to a flu ... | CVSS3: 5.9 | 2% Низкий | больше 7 лет назад |
| CVE-2019-13627 It was discovered that there was a ECDSA timing attack in the libgcrypt20 cryptographic library. Version affected: 1.8.4-5, 1.7.6-2+deb9u3, and 1.6.3-2+deb8u4. Versions fixed: 1.8.5-2 and 1.6.3-2+deb8u7. | CVSS3: 6.3 | 1% Низкий | около 7 лет назад |
| CVE-2019-13627 It was discovered that there was a ECDSA timing attack in the libgcrypt20 cryptographic library. Version affected: 1.8.4-5, 1.7.6-2+deb9u3, and 1.6.3-2+deb8u4. Versions fixed: 1.8.5-2 and 1.6.3-2+deb8u7. | CVSS3: 6.3 | 1% Низкий | около 7 лет назад |
| CVE-2019-13627 It was discovered that there was a ECDSA timing attack in the libgcrypt20 cryptographic library. Version affected: 1.8.4-5, 1.7.6-2+deb9u3, and 1.6.3-2+deb8u4. Versions fixed: 1.8.5-2 and 1.6.3-2+deb8u7. | CVSS3: 6.3 | 1% Низкий | около 7 лет назад |
 | CVE-2019-13627 It was discovered that there was a ECDSA timing attack in the libgcrypt20 cryptographic library. Version affected: 1.8.4-5, 1.7.6-2+deb9u3, and 1.6.3-2+deb8u4. Versions fixed: 1.8.5-2 and 1.6.3-2+deb8u7. | CVSS3: 6.3 | 1% Низкий | около 1 года назад |
| CVE-2019-13627 It was discovered that there was a ECDSA timing attack in the libgcryp ... | CVSS3: 6.3 | 1% Низкий | около 7 лет назад |
 | openSUSE-SU-2019:1792-1 Security update for libgcrypt | 2% Низкий | больше 7 лет назад | |
| SUSE-SU-2019:1971-1 Security update for libgcrypt | 2% Низкий | больше 7 лет назад | |
| SUSE-SU-2019:1859-1 Security update for libgcrypt | 2% Низкий | больше 7 лет назад | |
| GHSA-w862-39x5-q88x In Libgcrypt 1.8.4, the C implementation of AES is vulnerable to a flush-and-reload side-channel attack because physical addresses are available to other processes. (The C implementation is used on platforms where an assembly-language implementation is unavailable.) | CVSS3: 5.9 | 2% Низкий | больше 4 лет назад |
| openSUSE-SU-2020:0022-1 Security update for libgcrypt | 1% Низкий | почти 7 лет назад | |
| openSUSE-SU-2019:2161-1 Security update for libgcrypt | 1% Низкий | около 7 лет назад | |
| SUSE-SU-2019:3392-1 Security update for libgcrypt | 1% Низкий | почти 7 лет назад | |
| SUSE-SU-2019:2510-1 Security update for libgcrypt | 1% Низкий | около 7 лет назад | |
| SUSE-SU-2019:2349-1 Security update for libgcrypt | 1% Низкий | около 7 лет назад | |
 | RLSA-2020:4482 Moderate: libgcrypt security, bug fix, and enhancement update | 1% Низкий | около 6 лет назад |
Уязвимостей на страницу