{"id":"CVE-2017-0379","aliases":["ALPINE-CVE-2017-0379","DEBIAN-CVE-2017-0379","DSA-3959-1","EUVD-2017-0733","GHSA-j848-fx94-98m4","MGASA-2017-0334","openSUSE-SU-2024:10941-1"],"status":"published","title":"Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it...","description":"Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it easier for attackers to discover a secret key, related to cipher/ecc.c and mpi/ec.c.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.0351,"percentile":0.8927,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-200"],"published":"2017-08-29T00:00:00Z","modified":"2026-10-24T10:30:27Z","fixes":[{"ecosystem":"Alpine:v3.4","package":"libgcrypt","fixed_in":["1.7.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.5","package":"libgcrypt","fixed_in":["1.7.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.6","package":"libgcrypt","fixed_in":["1.7.9-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libgcrypt20","fixed_in":["1.7.9-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libgcrypt20","fixed_in":["1.7.9-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libgcrypt20","fixed_in":["1.7.9-1"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"libgcrypt20","fixed_in":["1.7.6-2+deb9u2"],"sources":["osv"]},{"ecosystem":"Mageia:6","package":"libgcrypt","fixed_in":["1.7.8-1.1.mga6"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.4","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.5","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.6","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.9-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libgcrypt20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.9-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libgcrypt20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.9-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libgcrypt20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.9-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"libgcrypt20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.6-2+deb9u2"}]}],"versions":["1.7.6-2","1.7.6-2+deb9u1"]},{"source":"osv","ecosystem":"Mageia:6","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.8-1.1.mga6"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.4-1.2"}]}],"bundled":7}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"gnupg","product":"libgcrypt"}],"references":[{"url":"http://www.securityfocus.com/bid/100503","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","tags":["x_refsource_CONFIRM","x_transferred","advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","tags":["x_refsource_CONFIRM","x_transferred","advisory"]},{"url":"http://www.securitytracker.com/id/1041294","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","web"]},{"url":"https://www.debian.org/security/2017/dsa-3959","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://lists.debian.org/debian-security-announce/2017/msg00221.html","tags":["x_refsource_MISC","x_transferred","Mailing List","Patch","Third Party Advisory","fix"]},{"url":"https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git%3Ba=commit%3Bh=da780c8183cccc8f533c8ace8211ac2cb2bdee7b","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://eprint.iacr.org/2017/806","tags":["x_refsource_MISC","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-0379","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20180726-0002/","tags":["x_refsource_CONFIRM","x_transferred","advisory"]},{"url":"https://bugs.debian.org/873383","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-0379"},{"url":"https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git;a=commit;h=da780c8183cccc8f533c8ace8211ac2cb2bdee7b"},{"url":"https://security.netapp.com/advisory/ntap-20180726-0002"},{"url":"https://github.com/advisories/GHSA-j848-fx94-98m4"},{"url":"https://security.alpinelinux.org/vuln/CVE-2017-0379","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2017-0334.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=21640","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2017-0379","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7526","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12904","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13627","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-33560","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2017-0379","description":"Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it easier for attackers to discover a secret key, related to cipher/ecc.c and mpi/ec.c.","status":"published","published":"2017-08-29T22:00:00Z","modified":"2024-08-05T13:03:56.982Z","updated_at":"2026-11-02T14:33:22.381225Z"}],"euvd":[{"id":"EUVD-2017-0733","description":"Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it easier for attackers to discover a secret key, related to cipher/ecc.c and mpi/ec.c.","status":"published","published":"2017-08-29T22:00:00Z","modified":"2024-08-05T13:03:56Z","updated_at":"2026-11-03T02:39:24.365813Z"}],"ghsa":[{"id":"GHSA-j848-fx94-98m4","title":"Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it...","description":"Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it easier for attackers to discover a secret key, related to cipher/ecc.c and mpi/ec.c.","status":"published","published":"2022-05-14T01:40:19Z","modified":"2025-04-20T03:45:14Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T15:01:51.665447Z"}],"nvd":[{"id":"CVE-2017-0379","description":"Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it easier for attackers to discover a secret key, related to cipher/ecc.c and mpi/ec.c.","status":"published","published":"2017-08-29T22:29:00.173Z","modified":"2026-06-17T00:57:36.117Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:03:57.82609Z"}],"osv":[{"id":"ALPINE-CVE-2017-0379","description":"Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it easier for attackers to discover a secret key, related to cipher/ecc.c and mpi/ec.c.","status":"published","published":"2017-08-29T22:29:00.173Z","modified":"2026-06-15T18:23:53.298657819Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:27:46.716249Z"},{"id":"CVE-2017-0379","description":"Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it easier for attackers to discover a secret key, related to cipher/ecc.c and mpi/ec.c.","status":"published","published":"2017-08-29T22:29:00.173Z","modified":"2026-10-24T10:30:27.983870047Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:44:03.472693Z"},{"id":"DEBIAN-CVE-2017-0379","description":"Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it easier for attackers to discover a secret key, related to cipher/ecc.c and mpi/ec.c.","status":"published","published":"2017-08-29T22:29:00.173Z","modified":"2026-09-01T20:03:40.330122936Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:45:28.207321Z"},{"id":"DSA-3959-1","title":"libgcrypt20 - security update","status":"published","published":"2017-08-29T00:00:00Z","modified":"2026-03-09T01:17:49.536213Z","updated_at":"2026-11-02T15:46:16.523846Z"},{"id":"MGASA-2017-0334","title":"Updated libgcrypt packages fix security vulnerability","description":"It was discovered that libgcrypt is prone to a local side-channel attack\nagainst the ECDH encryption with Curve25519, allowing recovery of the\nprivate key.\n","status":"published","published":"2017-09-10T12:36:09Z","modified":"2026-04-16T06:26:15.457962957Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"openSUSE-SU-2024:10941-1","title":"libgcrypt-cavs-1.9.4-1.2 on GA media","description":"These are all security issues fixed in the libgcrypt-cavs-1.9.4-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:35:52.263076Z","updated_at":"2026-11-02T16:58:34.894275Z"}]}}