CVE-2021-3345

Mô tả

Tham khảo

• bugs.gentoo.org/show_bug.cgi · Issue Tracking
• git.gnupg.org/cgi-bin/gitweb.cgi
• gnupg.org · Vendor Advisory
• lists.gnupg.org/pipermail/gnupg-announce/2021q1/000455.html · Mailing List
• lists.gnupg.org/pipermail/gnupg-announce/2021q1/000456.html · Mailing List
• oracle.com//security-alerts/cpujul2021.html · Third Party Advisory

Lỗ hổng khác của libgcrypt

• CVE-2026-41990TRUNG BÌNH 4.0Libgcrypt before 1.12.2 mishandles Dilithium signing. Writes to a static array lack a bounds check but do not use attacker-controlled data.
• CVE-2026-41989TRUNG BÌNH 6.7Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcry_pk_decrypt.
• CVE-2021-40528TRUNG BÌNH 5.9The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction between two cryptographic librari…
• CVE-2021-33560CAO 7.5Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel att…
• CVE-2015-0837TRUNG BÌNH 5.9The mpi_powm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timin…