Yüksek CVSS 7.5

CVE-2021-33560: Libgcrypt: güvenlik açığı

Yayın: 8 Haziran 2021 14:15 · Güncelleme: 6 Kasım 2026 09:48

Açıklama (NVD)

Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm, and the window size is not chosen appropriately. This, for example, affects use of ElGamal in OpenPGP.

Özet bilgiler

Ürün: Gnupg Libgcrypt
CVSS v3.1: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS: %2,37 (yüzdelik 84)
CWE: CWE-203
Yama: Mevcut

Etkilenen sürümler

Ürün	Başlangıç	Bitiş	Düzeltildi
gnupg-libgcrypt	—	—	1.8.8
gnupg-libgcrypt	1.9.0	—	1.9.3
debian-debian-linux	9.0	9.0	—
fedoraproject-fedora	33	33	—
fedoraproject-fedora	34	34	—
oracle-communications-cloud-native-core-binding-support-function	1.11.0	1.11.0	—
oracle-communications-cloud-native-core-network-function-cloud-native-environment	1.9.0	1.9.0	—
oracle-communications-cloud-native-core-network-function-cloud-native-environment	1.10.0	1.10.0	—
oracle-communications-cloud-native-core-network-repository-function	1.14.0	1.14.0	—
oracle-communications-cloud-native-core-network-repository-function	1.15.0	1.15.0	—
oracle-communications-cloud-native-core-network-repository-function	1.15.1	1.15.1	—
oracle-communications-cloud-native-core-network-slice-selection-function	1.8.0	1.8.0	—
oracle-communications-cloud-native-core-service-communication-proxy	1.15.0	1.15.0	—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları