CVE-2015-7511

概要

参考情報

• lists.opensuse.org/opensuse-updates/2016-05/msg00027.html
• cs.tau.ac.il/~tromer/ecdh
• debian.org/security/2016/dsa-3474
• debian.org/security/2016/dsa-3478
• securityfocus.com/bid/83253
• ubuntu.com/usn/USN-2896-1
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W2IL4PAEICHGA2XMQYRY3MIWHM4GMPAG
• lists.gnupg.org/pipermail/gnupg-announce/2016q1/000384.html · Vendor Advisory
• security.gentoo.org/glsa/201610-04

libgcrypt のその他の脆弱性

• CVE-2026-41990中 4.0Libgcrypt before 1.12.2 mishandles Dilithium signing. Writes to a static array lack a bounds check but do not use attacker-controlled data.
• CVE-2026-41989中 6.7Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcry_pk_decrypt.
• CVE-2021-40528中 5.9The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction between two cryptographic librari…
• CVE-2021-33560高 7.5Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel att…
• CVE-2021-3345高 7.8_gcry_md_block_write in cipher/hash-common.c in Libgcrypt version 1.9.0 has a heap-based buffer overflow when the digest final function sets…