Name
libgcrypt
Version
1.9.4
Type
library
Description
General purpose cryptographic library based on the code from GnuPG
Licenses
GPL-2.0-or-later & LGPL-2.1-or-later & GPL-3.0-or-later
PURL
-
CPE
cpe:2.3:*:gnupg:libgcrypt:1.9.4:*:*:*:*:*:*:*
Other Versions#
Vulnerabilities#
Name
Analysis
Description
Exploitable
Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcry_pk_decrypt.
Exploitable
A timing-based side-channel flaw was found in libgcrypt's RSA implementation. This issue may allow a remote attacker to initiate a Bleichenbacher-style attack, which can lead to the decryption of RSA ciphertexts.