pkg:Debian/libgcrypt20

26 total CVEsHIGH4MEDIUM19LOW2

✅ Check your installed version

All known vulnerabilities

  • HIGH7.5CVE-2021-33560Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel at…
    from 0
  • HIGH7.5CVE-2018-6829cipher/elgamal.c in Libgcrypt through 1.8.2, when used to encrypt messages directly, improperly encodes plaintexts, which allows attackers…
    from 0
  • HIGH7.5CVE-2017-0379libgcrypt20 - security update
    from 0, < 1.7.6-2+deb9u2
  • HIGH7.5CVE-2017-0379libgcrypt20 - security update
    from 0, < 1.7.9-1
  • MEDIUM6.8CVE-2017-7526libgcrypt11 - security update
    from 0, < 1.7.8-1
  • MEDIUM6.8CVE-2017-7526libgcrypt11 - security update
    from 0, < 1.6.3-2+deb8u4
  • MEDIUM6.7CVE-2026-41989Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcry_pk_decrypt.
    from 0, < 1.10.1-3+deb12u1
  • MEDIUM6.3CVE-2019-13627libgcrypt20 - regression update
    from 0, < 1.6.3-2+deb8u8
  • MEDIUM6.3CVE-2019-13627libgcrypt20 - regression update
    from 0, < 1.8.5-1
  • MEDIUM6.3CVE-2019-13627libgcrypt20 - regression update
    from 0, < 1.6.3-2+deb8u6
  • MEDIUM5.9CVE-2024-2236A timing-based side-channel flaw was found in libgcrypt's RSA implementation.
    from 0
  • MEDIUM5.9CVE-2021-40528libgcrypt20 - security update
    from 0, < 1.7.6-2+deb9u4
  • MEDIUM5.9CVE-2021-40528libgcrypt20 - security update
    from 0, < 1.8.7-6
  • MEDIUM5.9CVE-2015-0837The mpi_powm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timi…
    from 0, < 1.6.3-2
  • MEDIUM5.9CVE-2017-9526libgcrypt20 - security update
    from 0, < 1.6.3-2+deb8u3
  • MEDIUM5.9CVE-2017-9526libgcrypt20 - security update
    from 0, < 1.7.6-2
  • MEDIUM5.3CVE-2016-6313libgcrypt20 - security update
    from 0, < 1.7.3-1
  • MEDIUM5.3CVE-2016-6313libgcrypt20 - security update
    from 0, < 1.6.3-2+deb8u2
  • MEDIUM4.7CVE-2018-0495libgcrypt20 - security update
    from 0, < 1.7.6-2+deb9u3
  • MEDIUM4.7CVE-2018-0495libgcrypt20 - security update
    from 0, < 1.8.3-1
  • MEDIUM4.7CVE-2018-0495libgcrypt20 - security update
    from 0, < 1.6.3-2+deb8u5
  • MEDIUM4.2CVE-2014-3591gnupg - security update
    from 0, < 1.6.3-2
  • MEDIUM4.0CVE-2026-41990Libgcrypt before 1.12.2 mishandles Dilithium signing.
    from 0, < 1.12.2-1
  • LOW2.0CVE-2015-7511libgcrypt11 - security update
    from 0, < 1.6.3-2+deb8u1
  • LOW2.0CVE-2015-7511libgcrypt11 - security update
    from 0, < 1.6.5-2
  • —CVE-2014-5270libgcrypt11 - security update
    from 0, < 1.6.0-2