Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2021-33560 →
DEBIAN-CVE-2021-33560
Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack agains...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm, and the window size is not chosen appropriately. This, for example, affects use of ElGamal in OpenPGP.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
libgcrypt20
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.4-2"}]}]
Debian:13
libgcrypt20
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.4-2"}]}]
Debian:14
libgcrypt20
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.4-2"}]}]
Références
- advisory security-tracker.debian.org