Published: 26/07/2018 Updated: 07/11/2023

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 6.8 | Impact Score: 4 | Exploitability Score: 2.2

VMScore: 384

Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N

libgcrypt before version 1.7.8 is vulnerable to a cache side-channel attack resulting into a complete break of RSA-1024 while using the left-to-right method for computing the sliding-window expansion. The same attack is believed to work on RSA-2048 with moderately more computation. This side-channel requires that attacker can run arbitrary software on the hardware where the private RSA key is used.

Vulnerable Product	Search on Vulmon	Subscribe to Product
gnupg libgcrypt
canonical ubuntu linux 16.04
canonical ubuntu linux 14.04
canonical ubuntu linux 12.04
debian debian linux 8.0
debian debian linux 9.0

Daniel J Bernstein, Joachim Breitner, Daniel Genkin, Leon Groot Bruinderink, Nadia Heninger, Tanja Lange, Christine van Vredendaal and Yuval Yarom discovered that Libgcrypt is prone to a local side-channel attack allowing full key recovery for RSA-1024 See eprintiacrorg/2017/627 for details For the oldstable distribution (jessie), this ...

GnuPG could be made to expose sensitive information ...

Several security issues were fixed in Libgcrypt ...

libgcrypt before version 178 is vulnerable to a cache side-channel attack resulting into a complete break of RSA-1024 while using the left-to-right method for computing the sliding-window expansion The same attack is believed to work on RSA-2048 with moderately more computation This side-channel requires that attacker can run arbitrary software ...

The pattern of squarings and multiplications in left-to-right sliding windows in libgcrypt <= 177 leaks significant information about exponent bits, allowing for the very efficient recovery of a full 1024-bit RSA key ...

CWE-310 https://lists.gnupg.org/pipermail/gnupg-announce/2017q2/000408.html https://eprint.iacr.org/2017/627 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7526 https://www.debian.org/security/2017/dsa-3960 https://www.debian.org/security/2017/dsa-3901 http://www.securitytracker.com/id/1038915 http://www.securityfocus.com/bid/99338 https://usn.ubuntu.com/3733-1/https://usn.ubuntu.com/3733-2/https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git%3Ba=commit%3Bh=78130828e9a140a9de4dafadbc844dbb64cb709a https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git%3Ba=commit%3Bh=e6a3dc9900433bbc8ad362a595a3837318c28fa9 https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git%3Ba=commit%3Bh=8725c99ffa41778f382ca97233183bcd687bb0ce https://nvd.nist.gov https://www.debian.org/security/./dsa-3901 https://usn.ubuntu.com/3733-2/

CVE-2017-7526

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect