The mixing functions in the random number generator in Libgcrypt before 1.5.6, 1.6.x before 1.6.6, and 1.7.x before 1.7.3 and GnuPG before 1.4.21 make it easier for attackers to obtain the values of 160 bits by leveraging knowledge of the previous 4640 bits.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libgcrypt | Aug 30, 2017 | Dec 13, 2016 |
| Amazon_linux | — | Upgrade gnupgUpgrade libgcrypt | Jul 1, 2017 | Sep 15, 2016 |
| Centos_linux | — | Upgrade libgcryptUpgrade libgcrypt-devel | Nov 14, 2016 | Nov 12, 2016 |
| Debian | — | Upgrade libgcrypt20Upgrade gnupgUpgrade gnupg1Upgrade libgcrypt11 | Mar 31, 2017 | Aug 17, 2016 |
| Freebsd | — | Upgrade gnupg1Upgrade linux-c7-libgcryptUpgrade linux-c6-libgcryptUpgrade libgcrypt | Dec 10, 2025 | Aug 18, 2016 |
| Gentoo Linux | — | Upgrade app-crypt/gnupg.Upgrade dev-libs/libgcrypt. | Oct 30, 2017 | Dec 13, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade libgcryptUpgrade libgcrypt-devel | Nov 30, 2017 | Dec 13, 2016 |
| Oracle Solaris | — | Upgrade system/library/security/libgcrypt to version 1.7.8-0.175.3.25.0.3.0 on Solaris 11.3 | Nov 30, 2017 | Dec 13, 2016 |
| Oracle_linux | — | Upgrade libgcryptUpgrade libgcrypt-devel | Nov 9, 2016 | Aug 17, 2016 |
| Redhat_linux | — | No solution existsUpgrade libgcrypt-develUpgrade libgcrypt-debuginfoUpgrade libgcrypt | Nov 8, 2016 | Nov 8, 2016 |
| Suse | — | Upgrade libgcrypt20-32bitUpgrade libgcrypt20-hmacUpgrade libgcrypt-develUpgrade libgcrypt-devel-32bitUpgrade sles12-docker-imageUpgrade libgcrypt20Upgrade sles12sp1-docker-imageUpgrade libgcrypt11-32bitUpgrade libgcrypt11Upgrade libgcrypt11-x86Upgrade libgcrypt20-hmac-32bit | Dec 13, 2016 | Dec 13, 2016 |
| Ubuntu | — | Upgrade gnupgUpgrade libgcrypt20Upgrade libgcrypt11 | Jul 1, 2017 | Aug 18, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub