Every CVE Search/ Get API key

CVE-2021-33560

Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks...

7.5 HighPublic exploitFix available

Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm, and the window size is not chosen appropriately. This, for example, affects use of ElGamal in OpenPGP.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
None

Exploit likelihood

2.37%Up 1.3 points since Jun 9, 2021
90%50%10%1%

What each source reports

NVD Score used 7.5

Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm, and the window size is not chosen appropriately. This, for example, affects use of ElGamal in OpenPGP.

Record
CVE-2021-33560
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Weakness
CWE-203, CWE-325
Updated
2026-11-02
CVE List 7.5

Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm, and the window size is not chosen appropriately. This, for example, affects use of ElGamal in OpenPGP.

Record
CVE-2021-33560
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-325
Updated
2026-11-02
EUVDEUVD-2021-20252 7.5

Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm, and the window size is not chosen appropriately. This, for example, affects use of ElGamal in OpenPGP.

Record
EUVD-2021-20252
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-g9p5-p7h5-p2wg 7.5

Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks...

Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm, and the window size is not chosen appropriately. (There is also an interoperability problem because the selection of the k integer value does not properly consider the differences between basic ElGamal encryption and generalized ElGamal encryption.) This, for example, affects use of ElGamal in OpenPGP.

Record
GHSA-g9p5-p7h5-p2wg
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-203, CWE-325
Updated
2026-11-02
OSVALPINE-CVE-2021-33560 7.5

Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm, and the window size is not chosen appropriately. This, for example, affects use of ElGamal in OpenPGP.

Record
ALPINE-CVE-2021-33560
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVBELL-CVE-2021-33560 7.5

CVE-2021-33560 does not affect BellSoft software

Record
BELL-CVE-2021-33560
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
Show 21 moreShow less
OSV 7.5

Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm, and the window size is not chosen appropriately. This, for example, affects use of ElGamal in OpenPGP.

Record
CVE-2021-33560
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2021-33560 7.5

Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm, and the window size is not chosen appropriately. This, for example, affects use of ElGamal in OpenPGP.

Record
DEBIAN-CVE-2021-33560
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVJLSEC-2026-123 7.5

Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm, and the window size is not chosen appropriately. This, for example, affects use of ElGamal in OpenPGP.

Record
JLSEC-2026-123
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Updated
2026-11-02
OSVOESA-2021-1243 7.5

libgcrypt security update

Libgcrypt is a general purpose cryptographic library originally based on code from GnuPG.

Security Fix(es):

Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm, and the window size is not chosen appropriately. (There is also an interoperability problem because the selection of the k integer value does not properly consider the differences between basic ElGamal encryption and generalized ElGamal encryption.) This, for example, affects use of ElGamal in OpenPGP.(CVE-2021-33560)

Record
OESA-2021-1243
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2021:4409 7.5

Red Hat Security Advisory: libgcrypt security and bug fix update

Record
RHSA-2021:4409
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVRLSA-2021:4409 7.5

Moderate: libgcrypt security and bug fix update

The libgcrypt library provides general-purpose implementations of various cryptographic algorithms.

Security Fix(es):

  • libgcrypt: mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm (CVE-2021-33560)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.5 Release Notes linked from the References section.

Record
RLSA-2021:4409
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2021-33560 7.5

Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm, and the window size is not chosen appropriately. This, for example, affects use of ElGamal in OpenPGP.

Record
UBUNTU-CVE-2021-33560
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVALSA-2021:4409 No score

Moderate: libgcrypt security and bug fix update

The libgcrypt library provides general-purpose implementations of various cryptographic algorithms.

Security Fix(es):

  • libgcrypt: mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm (CVE-2021-33560)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2021:4409
Updated
2026-11-02
OSVCLSA-2023-1698945053 No score

libgcrypt: Fix of 4 CVEs

  • CVE-2013-4576: Normalize the MPIs to prevent possible side-channel attacks
  • CVE-2014-3591: Use ciphertext blinding for Elgamal to prevent possible side-channel attacks
  • CVE-2021-33560: Use of smaller K for ephemeral key in ElGamal prevent generation of weak keys
  • CVE-2021-40528: Add exponent blinding as well to mitigate side-channel attack on mpi_powm
  • tests: Add a benchmark for Elgamal
Record
CLSA-2023-1698945053
Updated
2026-11-02
OSVCLSA-2026-1782731604 No score

libgcrypt: Fix of CVE-2021-33560

  • CVE-2013-4576: Normalize the MPIs to prevent possible side-channel attacks
  • CVE-2014-3591: Use ciphertext blinding for Elgamal to prevent possible side-channel attacks
  • CVE-2021-33560: Use of smaller K for ephemeral key in ElGamal prevent generation of weak keys
  • CVE-2021-40528: Add exponent blinding as well to mitigate side-channel attack on mpi_powm
  • tests: Add a benchmark for Elgamal
Record
CLSA-2026-1782731604
Updated
2026-11-02
OSVMGASA-2021-0294 No score

Updated libgcrypt packages fix a security vulnerability

Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm, and the window size is not chosen appropriately (CVE-2021-33560).

Record
MGASA-2021-0294
Updated
2026-11-02
OSVopenSUSE-SU-2021:0919-1 No score

Security update for libgcrypt

This update for libgcrypt fixes the following issues:

  • CVE-2021-33560: Fixed a side-channel against ElGamal encryption, caused by missing exponent blinding (bsc#1187212).

This update was imported from the SUSE:SLE-15-SP1:Update update project.

Record
openSUSE-SU-2021:0919-1
Updated
2026-11-02
OSVopenSUSE-SU-2021:2157-1 No score

Security update for libgcrypt

This update for libgcrypt fixes the following issues:

  • CVE-2021-33560: Fixed a side-channel against ElGamal encryption, caused by missing exponent blinding (bsc#1187212).
Record
openSUSE-SU-2021:2157-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10941-1 No score

libgcrypt-cavs-1.9.4-1.2 on GA media

These are all security issues fixed in the libgcrypt-cavs-1.9.4-1.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10941-1
Updated
2026-11-02
OSVROOT-OS-DEBIAN-11-CVE-2021-33560 No score

CVE-2021-33560 in libgcrypt20 - Patched by Root

Root has patched CVE-2021-33560 in the libgcrypt20 package for Root:Debian:11. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-11-CVE-2021-33560
Updated
2026-11-02
OSVSUSE-SU-2021:14751-1 No score

Security update for libgcrypt

This update for libgcrypt fixes the following issues:

  • CVE-2021-33560: Fixed a side-channel against ElGamal encryption, caused by missing exponent blinding (bsc#1187212).
Record
SUSE-SU-2021:14751-1
Updated
2026-11-02
OSVSUSE-SU-2021:2155-1 No score

Security update for libgcrypt

This update for libgcrypt fixes the following issues:

  • CVE-2021-33560: Fixed a side-channel against ElGamal encryption, caused by missing exponent blinding (bsc#1187212).
Record
SUSE-SU-2021:2155-1
Updated
2026-11-02
OSVSUSE-SU-2021:2156-1 No score

Security update for libgcrypt

This update for libgcrypt fixes the following issues:

  • CVE-2021-33560: Fixed a side-channel against ElGamal encryption, caused by missing exponent blinding (bsc#1187212).
Record
SUSE-SU-2021:2156-1
Updated
2026-11-02
OSVSUSE-SU-2021:2157-1 No score

Security update for libgcrypt

This update for libgcrypt fixes the following issues:

  • CVE-2021-33560: Fixed a side-channel against ElGamal encryption, caused by missing exponent blinding (bsc#1187212).
Record
SUSE-SU-2021:2157-1
Updated
2026-11-02
OSVUSN-5080-1 No score

libgcrypt20 vulnerabilities

It was discovered that Libgcrypt incorrectly handled ElGamal encryption. An attacker could possibly use this issue to recover sensitive information.

Record
USN-5080-1
Updated
2026-11-02
OSVUSN-5080-2 No score

libgcrypt20 vulnerabilities

USN-5080-1 fixed several vulnerabilities in Libgcrypt. This update provides the corresponding update for Ubuntu 16.04 ESM.

Original advisory details:

It was discovered that Libgcrypt incorrectly handled ElGamal encryption. An attacker could possibly use this issue to recover sensitive information.

Record
USN-5080-2
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libgcrypt
Alpine:v3.11
 1.9.0 up to 1.8.8-r0
1.8.8-r0
libgcrypt
Alpine:v3.12
 1.9.0 up to 1.8.8-r0
1.8.8-r0
libgcrypt
Alpine:v3.13
 1.9.0 up to 1.8.8-r0
1.8.8-r0
libgcrypt
Alpine:v3.14
 1.9.0 up to 1.9.4-r0
1.9.4-r0
libgcrypt
Alpine:v3.15
 1.9.0 up to 1.9.4-r0
1.9.4-r0
libgcrypt
Alpine:v3.16
 1.9.0 up to 1.9.4-r0
1.9.4-r0
libgcrypt
Alpine:v3.17
 1.9.0 up to 1.9.4-r0
1.9.4-r0
libgcrypt
Alpine:v3.18
 1.9.0 up to 1.9.4-r0
1.9.4-r0
libgcrypt
Alpine:v3.19
 1.9.0 up to 1.9.4-r0
1.9.4-r0
libgcrypt
Alpine:v3.20
 1.9.0 up to 1.9.4-r0
1.9.4-r0
Show 71 moreShow less
Affected packages
PackageAffectedFixed
libgcrypt
Alpine:v3.21
 1.9.0 up to 1.9.4-r0
1.9.4-r0
libgcrypt
Alpine:v3.22
 1.9.0 up to 1.9.4-r0
1.9.4-r0
libgcrypt
Alpine:v3.23
 1.9.0 up to 1.9.4-r0
1.9.4-r0
libgcrypt
Alpine:v3.24
 1.9.0 up to 1.9.4-r0
1.9.4-r0
libgcrypt
AlmaLinux:8
 before 1.8.5-6.el8
1.8.5-6.el8
libgcrypt-devel
AlmaLinux:8
 before 1.8.5-6.el8
1.8.5-6.el8
libgcrypt
TuxCare:CentOS:7
From an advisory covering 4 CVEs
 before 1.5.3-14.el7.tuxcare.els1
1.5.3-14.el7.tuxcare.els1
libgcrypt-devel
TuxCare:CentOS:7
From an advisory covering 4 CVEs
 before 1.5.3-14.el7.tuxcare.els1
1.5.3-14.el7.tuxcare.els1
libgcrypt
TuxCare:OracleLinux:7
From an advisory covering 4 CVEs
 before 1.5.3-14.el7.tuxcare.els1
1.5.3-14.el7.tuxcare.els1
libgcrypt-devel
TuxCare:OracleLinux:7
From an advisory covering 4 CVEs
 before 1.5.3-14.el7.tuxcare.els1
1.5.3-14.el7.tuxcare.els1
libgcrypt20
Debian:12
 before 1.9.4-2
1.9.4-2
libgcrypt20
Debian:13
 before 1.9.4-2
1.9.4-2
libgcrypt20
Debian:14
 before 1.9.4-2
1.9.4-2
Libgcrypt_jll
Julia
 before 1.8.11+0
1.8.11+0
libgcrypt
Mageia:7
 before 1.8.5-1.1.mga7
1.8.5-1.1.mga7
libgcrypt
Mageia:8
 before 1.8.7-1.1.mga8
1.8.7-1.1.mga8
libgcrypt
openEuler:20.03-LTS-SP1
 before 1.8.6-3.oe1
1.8.6-3.oe1
libgcrypt
Red Hat:enterprise_linux:8::baseos
 before 0:1.8.5-6.el8
0:1.8.5-6.el8
libgcrypt-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:1.8.5-6.el8
0:1.8.5-6.el8
libgcrypt-debugsource
Red Hat:enterprise_linux:8::baseos
 before 0:1.8.5-6.el8
0:1.8.5-6.el8
libgcrypt-devel
Red Hat:enterprise_linux:8::baseos
 before 0:1.8.5-6.el8
0:1.8.5-6.el8
libgcrypt-devel-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:1.8.5-6.el8
0:1.8.5-6.el8
libgcrypt
Rocky Linux:8
 before 0:1.8.5-6.el8
0:1.8.5-6.el8
libgcrypt20
Root:Debian:11
 before 1.8.7-6.root.io.1
1.8.7-6.root.io.11.8.7-6.root.io.41.8.7-6.root.io.21.8.7-6.root.io.31.8.7-6.aikido.5
rootio-libgcrypt20
Root:Debian:11
 before 1.8.7-6.root.io.1
1.8.7-6.root.io.11.8.7-6.root.io.41.8.7-6.root.io.21.8.7-6.root.io.31.8.7-6.aikido.5
libgcrypt
SUSE:Linux Enterprise Point of Sale 11 SP3
 before 1.5.0-0.26.6.1
1.5.0-0.26.6.1
libgcrypt
SUSE:Linux Enterprise Server 11 SP4-LTSS
 before 1.5.0-0.26.6.1
1.5.0-0.26.6.1
libgcrypt
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
 before 1.8.2-6.52.1
1.8.2-6.52.1
libgcrypt
SUSE:Linux Enterprise High Performance Computing 15-LTSS
 before 1.8.2-6.52.1
1.8.2-6.52.1
libgcrypt
SUSE:Linux Enterprise Server 15-LTSS
 before 1.8.2-6.52.1
1.8.2-6.52.1
libgcrypt
SUSE:Linux Enterprise Server for SAP Applications 15
 before 1.8.2-6.52.1
1.8.2-6.52.1
libgcrypt
SUSE:HPE Helion OpenStack 8
 before 1.6.1-16.77.1
1.6.1-16.77.1
libgcrypt
SUSE:OpenStack Cloud 8
 before 1.6.1-16.77.1
1.6.1-16.77.1
libgcrypt
SUSE:OpenStack Cloud 9
 before 1.6.1-16.77.1
1.6.1-16.77.1
libgcrypt
SUSE:OpenStack Cloud Crowbar 8
 before 1.6.1-16.77.1
1.6.1-16.77.1
libgcrypt
SUSE:OpenStack Cloud Crowbar 9
 before 1.6.1-16.77.1
1.6.1-16.77.1
libgcrypt
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 1.6.1-16.77.1
1.6.1-16.77.1
libgcrypt
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
 before 1.6.1-16.77.1
1.6.1-16.77.1
libgcrypt
SUSE:Linux Enterprise Software Development Kit 12 SP5
 before 1.6.1-16.77.1
1.6.1-16.77.1
libgcrypt
SUSE:Linux Enterprise Server 12 SP2-BCL
 before 1.6.1-16.77.1
1.6.1-16.77.1
libgcrypt
SUSE:Linux Enterprise Server 12 SP3-LTSS
 before 1.6.1-16.77.1
1.6.1-16.77.1
libgcrypt
SUSE:Linux Enterprise Server 12 SP3-BCL
 before 1.6.1-16.77.1
1.6.1-16.77.1
libgcrypt
SUSE:Linux Enterprise Server 12 SP4-LTSS
 before 1.6.1-16.77.1
1.6.1-16.77.1
libgcrypt
SUSE:Linux Enterprise Server 12 SP5
 before 1.6.1-16.77.1
1.6.1-16.77.1
libgcrypt
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 1.6.1-16.77.1
1.6.1-16.77.1
libgcrypt
SUSE:Linux Enterprise Module for Basesystem 15 SP2
 before 1.8.2-8.39.1
1.8.2-8.39.1
libgcrypt
SUSE:Linux Enterprise Module for Basesystem 15 SP3
 before 1.8.2-8.39.1
1.8.2-8.39.1
libgcrypt
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
 before 1.8.2-8.39.1
1.8.2-8.39.1
libgcrypt
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
 before 1.8.2-8.39.1
1.8.2-8.39.1
libgcrypt
SUSE:Linux Enterprise Server 15 SP1-BCL
 before 1.8.2-8.39.1
1.8.2-8.39.1
libgcrypt
SUSE:Linux Enterprise Server 15 SP1-LTSS
 before 1.8.2-8.39.1
1.8.2-8.39.1
libgcrypt
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
 before 1.8.2-8.39.1
1.8.2-8.39.1
libgcrypt
SUSE:Manager Proxy 4.0
 before 1.8.2-8.39.1
1.8.2-8.39.1
libgcrypt
SUSE:Manager Retail Branch Server 4.0
 before 1.8.2-8.39.1
1.8.2-8.39.1
libgcrypt
SUSE:Manager Server 4.0
 before 1.8.2-8.39.1
1.8.2-8.39.1
libgcrypt
SUSE:Linux Enterprise Micro 5.0
 before 1.8.2-8.39.1
1.8.2-8.39.1
libgcrypt
SUSE:Enterprise Storage 6
 before 1.8.2-8.39.1
1.8.2-8.39.1
libgcrypt20
Ubuntu:Pro:16.04:LTS
 before 1.6.5-2ubuntu0.6+esm1, plus listed versions
1.6.3-2ubuntu11.6.4-31.6.4-41.6.4-51.6.5-2
Show 5 moreShow less
1.6.5-2ubuntu0.21.6.5-2ubuntu0.31.6.5-2ubuntu0.41.6.5-2ubuntu0.51.6.5-2ubuntu0.6
1.6.5-2ubuntu0.6+esm1
libgcrypt20
Ubuntu:18.04:LTS
 before 1.8.1-4ubuntu1.3, plus listed versions
1.7.8-2ubuntu11.7.9-11.8.1-41.8.1-4ubuntu11.8.1-4ubuntu1.11.8.1-4ubuntu1.2
1.8.1-4ubuntu1.3
libgcrypt20
Ubuntu:Pro:FIPS-updates:18.04:LTS
 before 1.8.1-4ubuntu1.fips.3, plus listed versions
1.8.1-4ubuntu1.fips.2.41.8.1-4ubuntu1.fips.2.5
1.8.1-4ubuntu1.fips.3
libgcrypt20
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
1.8.1-4ubuntu1.fips.2.41.8.1-4ubuntu1.fips.2.5
 None known
libgcrypt20
Ubuntu:20.04:LTS
 before 1.8.5-5ubuntu1.1, plus listed versions
1.8.4-5ubuntu21.8.5-3ubuntu11.8.5-5ubuntu1
1.8.5-5ubuntu1.1
libgcrypt20
Ubuntu:Pro:FIPS-updates:20.04:LTS
 before 1.8.5-5ubuntu1.fips.1.1
1.8.5-5ubuntu1.fips.1.1
libgcrypt20
Ubuntu:Pro:FIPS:20.04:LTS
 before 1.8.5-5ubuntu1.fips.1.1
1.8.5-5ubuntu1.fips.1.1
libgcrypt20
Ubuntu:22.04:LTS
 before 1.8.7-5ubuntu2
1.8.7-5ubuntu2
libgcrypt20
Ubuntu:18.04:LTS
From an advisory covering 2 CVEs
 before 1.8.1-4ubuntu1.3, plus listed versions
1.7.8-2ubuntu11.7.9-11.8.1-41.8.1-4ubuntu11.8.1-4ubuntu1.11.8.1-4ubuntu1.2
1.8.1-4ubuntu1.3
libgcrypt20
Ubuntu:20.04:LTS
From an advisory covering 2 CVEs
 before 1.8.5-5ubuntu1.1, plus listed versions
1.8.4-5ubuntu21.8.5-3ubuntu11.8.5-5ubuntu1
1.8.5-5ubuntu1.1
libgcrypt20
Ubuntu:Pro:16.04:LTS
From an advisory covering 2 CVEs
 before 1.6.5-2ubuntu0.6+esm1, plus listed versions
1.6.3-2ubuntu11.6.4-31.6.4-41.6.4-51.6.5-2
Show 5 moreShow less
1.6.5-2ubuntu0.21.6.5-2ubuntu0.31.6.5-2ubuntu0.41.6.5-2ubuntu0.51.6.5-2ubuntu0.6
1.6.5-2ubuntu0.6+esm1
libgcrypt
openSUSE:Leap 15.2
 before 1.8.2-lp152.17.3.1
1.8.2-lp152.17.3.1
libgcrypt
openSUSE:Leap 15.3
 before 1.8.2-8.39.1
1.8.2-8.39.1
libgcrypt
openSUSE:Tumbleweed
From an advisory covering 7 CVEs
 before 1.9.4-1.2
1.9.4-1.2

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubIBM/PGP-client-checker-CVE-2021-335602021-07-16

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-33560 is a high vulnerability (CVSS 7.5) in Gnupg Libgcrypt, published June 8, 2021. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 2.37%, the 83rd percentile. Fixed in libgcrypt 1.8.8-r0.

References

Show 50 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open