Every CVE Search/ Get API key

CVE-2017-7526

libgcrypt before version 1.7.8 is vulnerable to a cache side-channel attack resulting into a...

6.1 MediumFix available

libgcrypt before version 1.7.8 is vulnerable to a cache side-channel attack resulting into a complete break of RSA-1024 while using the left-to-right method for computing the sliding-window expansion. The same attack is believed to work on RSA-2048 with moderately more computation. This side-channel requires that attacker can run arbitrary software on the hardware where the private RSA key is used.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
None

Exploit likelihood

3.84%Up 1.2 points since Apr 14, 2021
90%50%10%1%

What each source reports

CVE List Score used 6.1

libgcrypt before version 1.7.8 is vulnerable to a cache side-channel attack resulting into a complete break of RSA-1024 while using the left-to-right method for computing the sliding-window expansion. The same attack is believed to work on RSA-2048 with moderately more computation. This side-channel requires that attacker can run arbitrary software on the hardware where the private RSA key is used.

Record
CVE-2017-7526
CVSS 3.0
6.1 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N
Weakness
CWE-200
Updated
2026-11-02
EUVDEUVD-2017-16542 6.1

libgcrypt before version 1.7.8 is vulnerable to a cache side-channel attack resulting into a complete break of RSA-1024 while using the left-to-right method for computing the sliding-window expansion. The same attack is believed to work on RSA-2048 with moderately more computation. This side-channel requires that attacker can run arbitrary software on the hardware where the private RSA key is used.

Record
EUVD-2017-16542
CVSS 3.0
6.1 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-f2v5-c455-qhg2 6.8

libgcrypt before version 1.7.8 is vulnerable to a cache side-channel attack resulting into a...

libgcrypt before version 1.7.8 is vulnerable to a cache side-channel attack resulting into a complete break of RSA-1024 while using the left-to-right method for computing the sliding-window expansion. The same attack is believed to work on RSA-2048 with moderately more computation. This side-channel requires that attacker can run arbitrary software on the hardware where the private RSA key is used.

Record
GHSA-f2v5-c455-qhg2
CVSS 3.0
6.8 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02
NVD 6.1

libgcrypt before version 1.7.8 is vulnerable to a cache side-channel attack resulting into a complete break of RSA-1024 while using the left-to-right method for computing the sliding-window expansion. The same attack is believed to work on RSA-2048 with moderately more computation. This side-channel requires that attacker can run arbitrary software on the hardware where the private RSA key is used.

Record
CVE-2017-7526
CVSS 3.0
6.1 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N
CVSS 3.0
6.8 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:P/I:N/A:N
Weakness
CWE-200, CWE-310
Updated
2026-11-02
OSVALPINE-CVE-2017-7526 6.8

libgcrypt before version 1.7.8 is vulnerable to a cache side-channel attack resulting into a complete break of RSA-1024 while using the left-to-right method for computing the sliding-window expansion. The same attack is believed to work on RSA-2048 with moderately more computation. This side-channel requires that attacker can run arbitrary software on the hardware where the private RSA key is used.

Record
ALPINE-CVE-2017-7526
CVSS 3.0
6.8 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVAZL-41702 6.8

CVE-2017-7526 affecting package grub2 for versions less than 2.06-25

libgcrypt before version 1.7.8 is vulnerable to a cache side-channel attack resulting into a complete break of RSA-1024 while using the left-to-right method for computing the sliding-window expansion. The same attack is believed to work on RSA-2048 with moderately more computation. This side-channel requires that attacker can run arbitrary software on the hardware where the private RSA key is used.

Record
AZL-41702
CVSS 3.0
6.8 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-05
Show 14 moreShow less
OSVBELL-CVE-2017-7526 6.8

CVE-2017-7526 does not affect BellSoft software

Record
BELL-CVE-2017-7526
CVSS 3.0
6.8 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSV 6.8

libgcrypt before version 1.7.8 is vulnerable to a cache side-channel attack resulting into a complete break of RSA-1024 while using the left-to-right method for computing the sliding-window expansion. The same attack is believed to work on RSA-2048 with moderately more computation. This side-channel requires that attacker can run arbitrary software on the hardware where the private RSA key is used.

Record
CVE-2017-7526
CVSS 3.0
6.8 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2017-7526 6.8

libgcrypt before version 1.7.8 is vulnerable to a cache side-channel attack resulting into a complete break of RSA-1024 while using the left-to-right method for computing the sliding-window expansion. The same attack is believed to work on RSA-2048 with moderately more computation. This side-channel requires that attacker can run arbitrary software on the hardware where the private RSA key is used.

Record
DEBIAN-CVE-2017-7526
CVSS 3.0
6.8 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2017-7526 6.8

libgcrypt before version 1.7.8 is vulnerable to a cache side-channel attack resulting into a complete break of RSA-1024 while using the left-to-right method for computing the sliding-window expansion. The same attack is believed to work on RSA-2048 with moderately more computation. This side-channel requires that attacker can run arbitrary software on the hardware where the private RSA key is used.

Record
UBUNTU-CVE-2017-7526
CVSS 3.0
6.8 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
CVSS 3.0
6.1 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVMGASA-2017-0213 No score

Updated libgcrypt packages fix security vulnerability

Daniel J. Bernstein, Joachim Breitner, Daniel Genkin, Leon Groot Bruinderink, Nadia Heninger, Tanja Lange, Christine van Vredendaal, and Yuval Yarom discovered that Libgcrypt was susceptible to an attack via side channels. A local attacker could use this attack to recover RSA private keys (CVE-2017-7526).

Record
MGASA-2017-0213
Updated
2026-11-02
OSVMGASA-2017-0235 No score

Updated gnupg packages fix security vulnerability

Daniel J. Bernstein, Joachim Breitner, Daniel Genkin, Leon Groot Bruinderink, Nadia Heninger, Tanja Lange, Christine van Vredendaal, and Yuval Yarom discovered that GnuPG was susceptible to an attack via side channels. A local attacker could use this attack to recover RSA private keys (CVE-2017-7526).

Record
MGASA-2017-0235
Updated
2026-11-02
OSVopenSUSE-SU-2024:10941-1 No score

libgcrypt-cavs-1.9.4-1.2 on GA media

These are all security issues fixed in the libgcrypt-cavs-1.9.4-1.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10941-1
Updated
2026-11-02
OSVSUSE-SU-2017:1793-1 No score

Security update for libgcrypt

This update for libgcrypt fixes the following issues:

  • CVE-2017-7526: Hardening a against local side-channel attack in RSA key handling has been added (bsc#1046607)
Record
SUSE-SU-2017:1793-1
Updated
2026-11-02
OSVSUSE-SU-2017:1794-1 No score

Security update for libgcrypt

This update for libgcrypt fixes the following issues:

  • CVE-2017-7526: Hardening against a local side-channel attack in RSA key handling has been added (bsc#1046607)
Record
SUSE-SU-2017:1794-1
Updated
2026-11-02
OSVSUSE-SU-2017:1866-1 No score

Security update for compat-libgcrypt11

This update for libgcrypt fixes the following security issue:

  • CVE-2017-7526: Hardening against local side-channel attack. (bsc#1046607)
Record
SUSE-SU-2017:1866-1
Updated
2026-11-02
OSVSUSE-SU-2017:2699-1 No score

Security update for SLES 12 Docker image

The SUSE Linux Enterprise Server 12 container image has been updated to include security and stability fixes.

The following issues related to building of the container images have been fixed:

  • Included krb5 package to avoid the inclusion of krb5-mini which gets selected as a dependency by the Build Service solver. (bsc#1056193)
  • Do not install recommended packages when building container images. (bsc#975726)

A number of security issues that have been already fixed by updates released for SUSE Linux Enterprise Server 12 are now included in the base image. A package/CVE cross-reference is available below.

pam:

  • CVE-2015-3238

libtasn1:

  • CVE-2015-3622
  • CVE-2016-4008

libidn:

  • CVE-2015-2059
  • CVE-2015-8948
  • CVE-2016-6261
  • CVE-2016-6262
  • CVE-2016-6263

zlib:

  • CVE-2016-9840
  • CVE-2016-9841
  • CVE-2016-9842
  • CVE-2016-9843

curl:

  • CVE-2016-5419
  • CVE-2016-5420
  • CVE-2016-5421
  • CVE-2016-7141
  • CVE-2016-7167
  • CVE-2016-8615
  • CVE-2016-8616
  • CVE-2016-8617
  • CVE-2016-8618
  • CVE-2016-8619
  • CVE-2016-8620
  • CVE-2016-8621
  • CVE-2016-8622
  • CVE-2016-8623
  • CVE-2016-8624
  • CVE-2016-9586
  • CVE-2017-1000100
  • CVE-2017-1000101
  • CVE-2017-7407

openssl:

  • CVE-2016-2105
  • CVE-2016-2106
  • CVE-2016-2107
  • CVE-2016-2108
  • CVE-2016-2109
  • CVE-2016-2177
  • CVE-2016-2178
  • CVE-2016-2179
  • CVE-2016-2180
  • CVE-2016-2181
  • CVE-2016-2182
  • CVE-2016-2183
  • CVE-2016-6302
  • CVE-2016-6303
  • CVE-2016-6304
  • CVE-2016-6306

libxml2:

  • CVE-2014-0191
  • CVE-2015-8806
  • CVE-2016-1762
  • CVE-2016-1833
  • CVE-2016-1834
  • CVE-2016-1835
  • CVE-2016-1837
  • CVE-2016-1838
  • CVE-2016-1839
  • CVE-2016-1840
  • CVE-2016-2073
  • CVE-2016-3627
  • CVE-2016-3705
  • CVE-2016-4447
  • CVE-2016-4448
  • CVE-2016-4449
  • CVE-2016-4483
  • CVE-2016-4658
  • CVE-2016-9318
  • CVE-2016-9597
  • CVE-2017-9047
  • CVE-2017-9048
  • CVE-2017-9049
  • CVE-2017-9050

util-linux:

  • CVE-2015-5218
  • CVE-2016-5011
  • CVE-2017-2616

cracklib:

  • CVE-2016-6318

systemd:

  • CVE-2014-9770
  • CVE-2015-8842
  • CVE-2016-7796

pcre:

  • CVE-2014-8964
  • CVE-2015-2325
  • CVE-2015-2327
  • CVE-2015-2328
  • CVE-2015-3210
  • CVE-2015-3217
  • CVE-2015-5073
  • CVE-2015-8380
  • CVE-2015-8381
  • CVE-2015-8382
  • CVE-2015-8383
  • CVE-2015-8384
  • CVE-2015-8385
  • CVE-2015-8386
  • CVE-2015-8387
  • CVE-2015-8388
  • CVE-2015-8389
  • CVE-2015-8390
  • CVE-2015-8391
  • CVE-2015-8392
  • CVE-2015-8393
  • CVE-2015-8394
  • CVE-2015-8395
  • CVE-2016-1283
  • CVE-2016-3191

appamor:

  • CVE-2017-6507

bash:

  • CVE-2014-6277
  • CVE-2014-6278
  • CVE-2016-0634
  • CVE-2016-7543

cpio:

  • CVE-2016-2037

glibc:

  • CVE-2016-1234
  • CVE-2016-3075
  • CVE-2016-3706
  • CVE-2016-4429
  • CVE-2017-1000366

perl:

  • CVE-2015-8853
  • CVE-2016-1238
  • CVE-2016-2381
  • CVE-2016-6185

libssh2_org:

  • CVE-2016-0787

expat:

  • CVE-2012-6702
  • CVE-2015-1283
  • CVE-2016-0718
  • CVE-2016-5300
  • CVE-2016-9063
  • CVE-2017-9233

ncurses:

  • CVE-2017-10684
  • CVE-2017-10685
  • CVE-2017-11112
  • CVE-2017-11113

libksba:

  • CVE-2016-4574
  • CVE-2016-4579

libgcrypt:

  • CVE-2015-7511
  • CVE-2016-6313
  • CVE-2017-7526

dbus-1:

  • CVE-2014-7824
  • CVE-2015-0245

Finally, the following packages received non-security fixes:

  • augeas
  • bzip2
  • ca-certificates-mozilla
  • coreutils
  • cryptsetup
  • cyrus-sasl
  • dirmngr
  • e2fsprogs
  • findutils
  • gpg2
  • insserv-compat
  • kmod
  • libcap
  • libsolv
  • libzypp
  • openldap2
  • p11-kit
  • permissions
  • procps
  • rpm
  • sed
  • shadow
  • zypper
Record
SUSE-SU-2017:2699-1
Updated
2026-11-02
OSVSUSE-SU-2017:2700-1 No score

Security update for SLES 12-SP1 Docker image

The SUSE Linux Enterprise Server 12 SP1 container image has been updated to include security and stability fixes.

The following issues related to building of the container images have been fixed:

  • Included krb5 package to avoid the inclusion of krb5-mini which gets selected as a dependency by the Build Service solver. (bsc#1056193)
  • Do not install recommended packages when building container images. (bsc#975726)

A number of security issues that have been already fixed by updates released for SUSE Linux Enterprise Server 12 SP1 are now included in the base image. A package/CVE cross-reference is available below.

pam:

  • CVE-2015-3238

libtasn1:

  • CVE-2015-3622
  • CVE-2016-4008

expat:

expat:

  • CVE-2012-6702
  • CVE-2015-1283
  • CVE-2016-0718
  • CVE-2016-5300
  • CVE-2016-9063
  • CVE-2017-9233

libidn:

  • CVE-2015-2059
  • CVE-2015-8948
  • CVE-2016-6261
  • CVE-2016-6262
  • CVE-2016-6263

zlib:

  • CVE-2016-9840
  • CVE-2016-9841
  • CVE-2016-9842
  • CVE-2016-9843

curl:

  • CVE-2016-5419
  • CVE-2016-5420
  • CVE-2016-5421
  • CVE-2016-7141
  • CVE-2016-7167
  • CVE-2016-8615
  • CVE-2016-8616
  • CVE-2016-8617
  • CVE-2016-8618
  • CVE-2016-8619
  • CVE-2016-8620
  • CVE-2016-8621
  • CVE-2016-8622
  • CVE-2016-8623
  • CVE-2016-8624
  • CVE-2016-9586
  • CVE-2017-1000100
  • CVE-2017-1000101
  • CVE-2017-7407

openssl:

  • CVE-2016-2105
  • CVE-2016-2106
  • CVE-2016-2107
  • CVE-2016-2108
  • CVE-2016-2109
  • CVE-2016-2177
  • CVE-2016-2178
  • CVE-2016-2179
  • CVE-2016-2180
  • CVE-2016-2181
  • CVE-2016-2182
  • CVE-2016-2183
  • CVE-2016-6302
  • CVE-2016-6303
  • CVE-2016-6304
  • CVE-2016-6306
  • CVE-2016-7056
  • CVE-2016-8610
  • CVE-2017-3731

cracklib:

  • CVE-2016-6318

pcre:

  • CVE-2014-8964
  • CVE-2015-2325
  • CVE-2015-2327
  • CVE-2015-2328
  • CVE-2015-3210
  • CVE-2015-3217
  • CVE-2015-5073
  • CVE-2015-8380
  • CVE-2015-8381
  • CVE-2015-8382
  • CVE-2015-8383
  • CVE-2015-8384
  • CVE-2015-8385
  • CVE-2015-8386
  • CVE-2015-8387
  • CVE-2015-8388
  • CVE-2015-8389
  • CVE-2015-8390
  • CVE-2015-8391
  • CVE-2015-8392
  • CVE-2015-8393
  • CVE-2015-8394
  • CVE-2015-8395
  • CVE-2016-1283
  • CVE-2016-3191

appamor:

  • CVE-2017-6507

bash:

  • CVE-2014-6277
  • CVE-2014-6278
  • CVE-2016-0634
  • CVE-2016-7543

cpio:

  • CVE-2016-2037

glibc:

  • CVE-2016-1234
  • CVE-2016-3075
  • CVE-2016-3706
  • CVE-2016-4429
  • CVE-2017-1000366

perl:

  • CVE-2015-8853
  • CVE-2016-1238
  • CVE-2016-2381
  • CVE-2016-6185

libssh2_org:

  • CVE-2016-0787

util-linux:

  • CVE-2016-5011
  • CVE-2017-2616

ncurses:

  • CVE-2017-10684
  • CVE-2017-10685
  • CVE-2017-11112
  • CVE-2017-11113

libksba:

  • CVE-2016-4574
  • CVE-2016-4579

libxml2:

  • CVE-2014-0191
  • CVE-2015-8806
  • CVE-2016-1762
  • CVE-2016-1833
  • CVE-2016-1834
  • CVE-2016-1835
  • CVE-2016-1837
  • CVE-2016-1838
  • CVE-2016-1839
  • CVE-2016-1840
  • CVE-2016-2073
  • CVE-2016-3627
  • CVE-2016-3705
  • CVE-2016-4447
  • CVE-2016-4448
  • CVE-2016-4449
  • CVE-2016-4483
  • CVE-2016-4658
  • CVE-2016-9318
  • CVE-2016-9597
  • CVE-2017-9047
  • CVE-2017-9048
  • CVE-2017-9049
  • CVE-2017-9050

libgcrypt:

  • CVE-2015-7511
  • CVE-2016-6313
  • CVE-2017-7526

update-alternatives:

  • CVE-2015-0860

systemd:

  • CVE-2014-9770
  • CVE-2015-8842
  • CVE-2016-7796

dbus-1:

  • CVE-2014-7824
  • CVE-2015-0245

Finally, the following packages received non-security fixes:

  • augeas
  • bzip2
  • ca-certificates-mozilla
  • coreutils
  • cryptsetup
  • cyrus-sasl
  • dirmngr
  • e2fsprogs
  • findutils
  • gpg2
  • insserv-compat
  • kmod
  • libcap
  • libsolv
  • libzypp
  • lua51
  • lvm2
  • netcfg
  • p11-kit
  • permissions
  • procps
  • rpm
  • sed
  • sg3_utils
  • shadow
  • zypper
Record
SUSE-SU-2017:2700-1
Updated
2026-11-02
OSVUSN-3347-1 No score

libgcrypt11, libgcrypt20 vulnerabilities

Daniel J. Bernstein, Joachim Breitner, Daniel Genkin, Leon Groot Bruinderink, Nadia Heninger, Tanja Lange, Christine van Vredendaal, and Yuval Yarom discovered that Libgcrypt was susceptible to an attack via side channels. A local attacker could use this attack to recover RSA private keys. (CVE-2017-7526)

It was discovered that Libgcrypt was susceptible to an attack via side channels. A local attacker could use this attack to possibly recover EdDSA private keys. This issue only applied to Ubuntu 16.04 LTS, Ubuntu 16.10 and Ubuntu 17.04. (CVE-2017-9526)

Record
USN-3347-1
Updated
2026-11-02
OSVUSN-3733-1 No score

gnupg vulnerability

Daniel J. Bernstein, Joachim Breitner, Daniel Genkin, Leon Groot Bruinderink, Nadia Heninger, Tanja Lange, Christine van Vredendaal, and Yuval Yarom discovered that GnuPG is vulnerable to a cache side-channel attack. A local attacker could use this attack to recover RSA private keys.

Record
USN-3733-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
gnupg1
Alpine:v3.10
 before 1.4.23-r0
1.4.23-r0
gnupg1
Alpine:v3.11
 before 1.4.23-r0
1.4.23-r0
gnupg1
Alpine:v3.12
 before 1.4.23-r0
1.4.23-r0
gnupg1
Alpine:v3.5
 before 1.4.23-r0
1.4.23-r0
gnupg1
Alpine:v3.6
 before 1.4.23-r0
1.4.23-r0
gnupg1
Alpine:v3.7
 before 1.4.23-r0
1.4.23-r0
gnupg1
Alpine:v3.8
 before 1.4.23-r0
1.4.23-r0
gnupg1
Alpine:v3.9
 before 1.4.23-r0
1.4.23-r0
grub2
Azure Linux:3
 before 2.06-25
2.06-25
gnupg1
Debian:12
 before 1.4.22-1
1.4.22-1
Show 27 moreShow less
Affected packages
PackageAffectedFixed
gnupg1
Debian:13
 before 1.4.22-1
1.4.22-1
gnupg1
Debian:14
 before 1.4.22-1
1.4.22-1
libgcrypt20
Debian:12
 before 1.7.8-1
1.7.8-1
libgcrypt20
Debian:13
 before 1.7.8-1
1.7.8-1
libgcrypt20
Debian:14
 before 1.7.8-1
1.7.8-1
libgcrypt11
Debian:7
 before 1.5.0-5+deb7u6, plus listed versions
1.5.0-51.5.0-5+deb7u11.5.0-5+deb7u21.5.0-5+deb7u31.5.0-5+deb7u41.5.0-5+deb7u5
1.5.0-5+deb7u6
gnupg
Debian:7
 before 1.4.12-7+deb7u9, plus listed versions
1.4.12-71.4.12-7+deb7u11.4.12-7+deb7u21.4.12-7+deb7u31.4.12-7+deb7u4
Show 4 moreShow less
1.4.12-7+deb7u51.4.12-7+deb7u61.4.12-7+deb7u71.4.12-7+deb7u8
1.4.12-7+deb7u9
libgcrypt20
Debian:8
 before 1.6.3-2+deb8u4, plus listed versions
1.6.3-21.6.3-2+deb8u11.6.3-2+deb8u21.6.3-2+deb8u3
1.6.3-2+deb8u4
libgcrypt20
Debian:9
 before 1.7.6-2+deb9u1, plus listed versions
1.7.6-2
1.7.6-2+deb9u1
gnupg
Debian:8
 before 1.4.18-7+deb8u4, plus listed versions
1.4.18-71.4.18-7+deb8u11.4.18-7+deb8u21.4.18-7+deb8u31.4.18-7+deb8u3~kbsd8u1
1.4.18-7+deb8u4
libgcrypt
Mageia:5
 before 1.5.4-5.4.mga5
1.5.4-5.4.mga5
gnupg
Mageia:5
 before 1.4.19-1.3.mga5
1.4.19-1.3.mga5
gnupg
Mageia:6
 before 1.4.22-1.mga6
1.4.22-1.mga6
libgcrypt
SUSE:Linux Enterprise Software Development Kit 11 SP4
 before 1.5.0-0.25.1
1.5.0-0.25.1
libgcrypt
SUSE:Linux Enterprise Server 11 SP4
 before 1.5.0-0.25.1
1.5.0-0.25.1
libgcrypt
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
 before 1.5.0-0.25.1
1.5.0-0.25.1
libgcrypt
SUSE:Linux Enterprise Desktop 12 SP2
 before 1.6.1-16.42.1
1.6.1-16.42.1
libgcrypt
SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2
 before 1.6.1-16.42.1
1.6.1-16.42.1
libgcrypt
SUSE:Linux Enterprise Software Development Kit 12 SP2
 before 1.6.1-16.42.1
1.6.1-16.42.1
libgcrypt
SUSE:Linux Enterprise Server 12 SP2
 before 1.6.1-16.42.1
1.6.1-16.42.1
libgcrypt
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
 before 1.6.1-16.42.1
1.6.1-16.42.1
compat-libgcrypt11
SUSE:Linux Enterprise Module for Legacy 12
 before 1.5.0-0.6.1
1.5.0-0.6.1
gnupg
Ubuntu:14.04:LTS
 before 1.4.16-1ubuntu2.6, plus listed versions
1.4.14-1ubuntu21.4.15-1.1ubuntu11.4.15-1.1ubuntu21.4.15-2ubuntu11.4.16-1ubuntu1
Show 5 moreShow less
1.4.16-1ubuntu21.4.16-1ubuntu2.11.4.16-1ubuntu2.31.4.16-1ubuntu2.41.4.16-1ubuntu2.5
1.4.16-1ubuntu2.6
libgcrypt11
Ubuntu:14.04:LTS
 before 1.5.3-2ubuntu4.5, plus listed versions
1.5.0-3ubuntu31.5.3-2ubuntu11.5.3-2ubuntu41.5.3-2ubuntu4.11.5.3-2ubuntu4.21.5.3-2ubuntu4.31.5.3-2ubuntu4.4
1.5.3-2ubuntu4.5
gnupg
Ubuntu:16.04:LTS
 before 1.4.20-1ubuntu3.3, plus listed versions
1.4.18-7ubuntu11.4.19-6ubuntu11.4.20-1ubuntu11.4.20-1ubuntu21.4.20-1ubuntu31.4.20-1ubuntu3.11.4.20-1ubuntu3.2
1.4.20-1ubuntu3.3
libgcrypt20
Ubuntu:16.04:LTS
 before 1.6.5-2ubuntu0.3, plus listed versions
1.6.3-2ubuntu11.6.4-31.6.4-41.6.4-51.6.5-21.6.5-2ubuntu0.2
1.6.5-2ubuntu0.3
libgcrypt
openSUSE:Tumbleweed
 before 1.9.4-1.2
1.9.4-1.2

History

History
RecordedChangedSources
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2017-7526 is a medium vulnerability (CVSS 6.1) in Gnupg Libgcrypt, published June 29, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.84%, the 90th percentile. Fixed in gnupg1 1.4.23-r0.

References

Show 187 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open