The mixing functions in the random number generator in Libgcrypt before 1.5.6, 1.6.x before 1.6.6, and 1.7.x before 1.7.3 and GnuPG before 1.4.21 make it easier for attackers to obtain the values of 160 bits by leveraging knowledge of the previous 4640 bits.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libgcrypt | Aug 30, 2017 | Dec 13, 2016 |
| Amazon_linux | — | Upgrade gnupgUpgrade libgcrypt | Jul 1, 2017 | Sep 15, 2016 |
| Centos_linux | — | Upgrade libgcryptUpgrade libgcrypt-devel | Nov 14, 2016 | Nov 12, 2016 |
| Debian | — | Upgrade gnupg1Upgrade gnupgUpgrade libgcrypt11Upgrade libgcrypt20 | Mar 31, 2017 | Aug 17, 2016 |
| Freebsd | — | Upgrade linux-c6-libgcryptUpgrade libgcryptUpgrade linux-c7-libgcryptUpgrade gnupg1 | Dec 10, 2025 | Aug 18, 2016 |
| Gentoo Linux | — | Upgrade dev-libs/libgcrypt.Upgrade app-crypt/gnupg. | Oct 30, 2017 | Dec 13, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade libgcryptUpgrade libgcrypt-devel | Nov 30, 2017 | Dec 13, 2016 |
| Oracle Solaris | — | Upgrade system/library/security/libgcrypt to version 1.7.8-0.175.3.25.0.3.0 on Solaris 11.3 | Nov 30, 2017 | Dec 13, 2016 |
| Oracle_linux | — | Upgrade libgcryptUpgrade libgcrypt-devel | Nov 9, 2016 | Aug 17, 2016 |
| Redhat_linux | — | Upgrade libgcrypt-develNo solution existsUpgrade libgcryptUpgrade libgcrypt-debuginfo | Nov 8, 2016 | Nov 8, 2016 |
| Suse | — | Upgrade libgcrypt11-x86Upgrade libgcrypt11Upgrade libgcrypt11-32bitUpgrade libgcrypt20-hmac-32bitUpgrade libgcrypt20Upgrade libgcrypt-develUpgrade libgcrypt20-32bitUpgrade sles12sp1-docker-imageUpgrade sles12-docker-imageUpgrade libgcrypt-devel-32bitUpgrade libgcrypt20-hmac | Dec 13, 2016 | Dec 13, 2016 |
| Ubuntu | — | Upgrade gnupgUpgrade libgcrypt20Upgrade libgcrypt11 | Jul 1, 2017 | Aug 18, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub