5.3

CVE-2016-6313

The mixing functions in the random number generator in Libgcrypt before 1.5.6, 1.6.x before 1.6.6, and 1.7.x before 1.7.3 and GnuPG before 1.4.21 make it easier for attackers to obtain the values of 160 bits by leveraging knowledge of the previous 4640 bits.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
GnupgLibgcrypt Version <= 1.5.3
GnupgLibgcrypt Version1.6.0
GnupgLibgcrypt Version1.6.1
GnupgLibgcrypt Version1.6.2
GnupgLibgcrypt Version1.6.3
GnupgLibgcrypt Version1.6.4
GnupgLibgcrypt Version1.6.5
GnupgLibgcrypt Version1.7.0
GnupgLibgcrypt Version1.7.1
GnupgLibgcrypt Version1.7.2
DebianDebian Linux Version8.0
CanonicalUbuntu Linux Version12.04 SwEditionlts
CanonicalUbuntu Linux Version14.04 SwEditionlts
CanonicalUbuntu Linux Version16.04 SwEditionlts
GnupgGnupg Version <= 1.4.14
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.6% 0.88
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.3 3.9 1.4
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

https://security.gentoo.org/glsa/201610-04
http://rhn.redhat.com/errata/RHSA-2016-2674.html
http://www.debian.org/security/2016/dsa-3649
Third Party Advisory
http://www.debian.org/security/2016/dsa-3650
Third Party Advisory
http://www.securityfocus.com/bid/92527
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1036635
http://www.ubuntu.com/usn/USN-3064-1
Third Party Advisory
http://www.ubuntu.com/usn/USN-3065-1
Third Party Advisory
https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git%3Ba=blob_plain%3Bf=NEWS
https://lists.gnupg.org/pipermail/gnupg-announce/2016q3/000395.html
Vendor Advisory
Mailing List
https://security.gentoo.org/glsa/201612-01