The mixing functions in the random number generator in Libgcrypt before 1.5.6, 1.6.x before 1.6.6, and 1.7.x before 1.7.3 and GnuPG before 1.4.21 make it easier for attackers to obtain the values of 160 bits by leveraging knowledge of the previous 4640 bits.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libgcrypt | Aug 30, 2017 | Dec 13, 2016 |
| Amazon_linux | — | Upgrade libgcryptUpgrade gnupg | Jul 1, 2017 | Sep 15, 2016 |
| Centos_linux | — | Upgrade libgcrypt-develUpgrade libgcrypt | Nov 14, 2016 | Nov 12, 2016 |
| Debian | — | Upgrade gnupgUpgrade gnupg1Upgrade libgcrypt20Upgrade libgcrypt11 | Mar 31, 2017 | Aug 17, 2016 |
| Freebsd | — | Upgrade libgcryptUpgrade linux-c6-libgcryptUpgrade linux-c7-libgcryptUpgrade gnupg1 | Dec 10, 2025 | Aug 18, 2016 |
| Gentoo Linux | — | Upgrade app-crypt/gnupg.Upgrade dev-libs/libgcrypt. | Oct 30, 2017 | Dec 13, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade libgcrypt-develUpgrade libgcrypt | Nov 30, 2017 | Dec 13, 2016 |
| Oracle Solaris | — | Upgrade system/library/security/libgcrypt to version 1.7.8-0.175.3.25.0.3.0 on Solaris 11.3 | Nov 30, 2017 | Dec 13, 2016 |
| Oracle_linux | — | Upgrade libgcryptUpgrade libgcrypt-devel | Nov 9, 2016 | Aug 17, 2016 |
| Redhat_linux | — | Upgrade libgcrypt-debuginfoNo solution existsUpgrade libgcryptUpgrade libgcrypt-devel | Nov 8, 2016 | Nov 8, 2016 |
| Suse | — | Upgrade libgcrypt11-x86Upgrade libgcrypt11-32bitUpgrade libgcrypt11Upgrade libgcrypt20-hmac-32bitUpgrade libgcrypt-devel-32bitUpgrade libgcrypt20-32bitUpgrade sles12sp1-docker-imageUpgrade libgcrypt-develUpgrade libgcrypt20-hmacUpgrade libgcrypt20Upgrade sles12-docker-image | Dec 13, 2016 | Dec 13, 2016 |
| Ubuntu | — | Upgrade libgcrypt20Upgrade gnupgUpgrade libgcrypt11 | Jul 1, 2017 | Aug 18, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub