| Package | Affected versions | Patched versions |
|---|---|---|
| libgcrypt | ≥ 1.9.0, < 1.9.3< 1.8.8 | 1.9.31.8.8 |
| communications cloud native core binding support function | = 1.11.0 | |
| communications cloud native core network function cloud native environment | = 1.10.0= 1.9.0 | |
| communications cloud native core network repository function | = 1.14.0= 1.15.0= 1.15.1 | |
| communications cloud native core network slice selection function | = 1.8.0 | |
| communications cloud native core service communication proxy | = 1.15.0 |
Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm, and the window size is not chosen appropriately. This, for example, affects use of ElGamal in OpenPGP.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free