The mixing functions in the random number generator in Libgcrypt before 1.5.6, 1.6.x before 1.6.6, and 1.7.x before 1.7.3 and GnuPG before 1.4.21 make it easier for attackers to obtain the values of 160 bits by leveraging knowledge of the previous 4640 bits.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libgcrypt | Aug 30, 2017 | Dec 13, 2016 |
| Amazon_linux | — | Upgrade gnupgUpgrade libgcrypt | Jul 1, 2017 | Sep 15, 2016 |
| Centos_linux | — | Upgrade libgcrypt-develUpgrade libgcrypt | Nov 14, 2016 | Nov 12, 2016 |
| Debian | — | Upgrade gnupgUpgrade libgcrypt20Upgrade libgcrypt11Upgrade gnupg1 | Mar 31, 2017 | Aug 17, 2016 |
| Freebsd | — | Upgrade libgcryptUpgrade linux-c6-libgcryptUpgrade gnupg1Upgrade linux-c7-libgcrypt | Dec 10, 2025 | Aug 18, 2016 |
| Gentoo Linux | — | Upgrade app-crypt/gnupg.Upgrade dev-libs/libgcrypt. | Oct 30, 2017 | Dec 13, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade libgcryptUpgrade libgcrypt-devel | Nov 30, 2017 | Dec 13, 2016 |
| Oracle Solaris | — | Upgrade system/library/security/libgcrypt to version 1.7.8-0.175.3.25.0.3.0 on Solaris 11.3 | Nov 30, 2017 | Dec 13, 2016 |
| Oracle_linux | — | Upgrade libgcryptUpgrade libgcrypt-devel | Nov 9, 2016 | Aug 17, 2016 |
| Redhat_linux | — | Upgrade libgcrypt-debuginfoUpgrade libgcrypt-develUpgrade libgcryptNo solution exists | Nov 8, 2016 | Nov 8, 2016 |
| Suse | — | Upgrade libgcrypt11Upgrade libgcrypt11-32bitUpgrade libgcrypt11-x86Upgrade libgcrypt20-hmac-32bitUpgrade libgcrypt-devel-32bitUpgrade libgcrypt-develUpgrade libgcrypt20-hmacUpgrade sles12-docker-imageUpgrade libgcrypt20Upgrade sles12sp1-docker-imageUpgrade libgcrypt20-32bit | Dec 13, 2016 | Dec 13, 2016 |
| Ubuntu | — | Upgrade gnupgUpgrade libgcrypt20Upgrade libgcrypt11 | Jul 1, 2017 | Aug 18, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub