CVE-2017-0379

Description

References

• oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
• securityfocus.com/bid/100503 · Third Party Advisory
• securitytracker.com/id/1041294
• bugs.debian.org/873383 · Issue Tracking
• eprint.iacr.org/2017/806 · Mailing List
• git.gnupg.org/cgi-bin/gitweb.cgi
• lists.debian.org/debian-security-announce/2017/msg00221.html · Mailing List
• security-tracker.debian.org/tracker/CVE-2017-0379 · Patch
• security.netapp.com/advisory/ntap-20180726-0002
• debian.org/security/2017/dsa-3959 · Patch
• oracle.com/technetwork/security-advisory/cpujan2019-5072801.html

Autres vulnérabilités de libgcrypt

• CVE-2026-41990MOYENNE 4.0Libgcrypt before 1.12.2 mishandles Dilithium signing. Writes to a static array lack a bounds check but do not use attacker-controlled data.
• CVE-2026-41989MOYENNE 6.7Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcry_pk_decrypt.
• CVE-2021-40528MOYENNE 5.9The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction between two cryptographic librari…
• CVE-2021-33560ÉLEVÉE 7.5Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel att…
• CVE-2021-3345ÉLEVÉE 7.8_gcry_md_block_write in cipher/hash-common.c in Libgcrypt version 1.9.0 has a heap-based buffer overflow when the digest final function sets…