CVE-2017-0379
HighSummary
Libgcrypt before version 1.8.1 does not properly consider Curve25519 side-channel attacks, making it easier for attackers to discover a secret key.
Risk Assessment
Organizations may be exposed to the disclosure of secret keys, leading to potential data security breaches.
Recommendation
It is recommended to update Libgcrypt to version 1.8.1 or later to minimize the risk associated with side-channel attacks.
Other vulnerabilities in Libgcrypt
See all- CVE-2021-33560High
Vulnerability in Libgcrypt before versions 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption due to missing exponent blinding, enabling a side-channel attack on mpi_powm. Additionally, the window size is not chosen appropriately, increasing information leakage risk.
- CVE-2026-41989Medium
A vulnerability in Libgcrypt before version 1.12.2 allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext passed to gcry_pk_decrypt.
Original NVD description (English source)
Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it easier for attackers to discover a secret key, related to cipher/ecc.c and mpi/ec.c.