{"id":"CVE-2021-33560","aliases":["ALPINE-CVE-2021-33560","ALSA-2021:4409","BELL-CVE-2021-33560","CLSA-2023-1698945053","CLSA-2026-1782731604","DEBIAN-CVE-2021-33560","EUVD-2021-20252","GHSA-g9p5-p7h5-p2wg","JLSEC-2026-123","MGASA-2021-0294","OESA-2021-1243","RHSA-2021:4409","RLSA-2021:4409","ROOT-OS-DEBIAN-11-CVE-2021-33560","SUSE-SU-2021:14751-1","SUSE-SU-2021:2155-1","SUSE-SU-2021:2156-1","SUSE-SU-2021:2157-1","UBUNTU-CVE-2021-33560","USN-5080-1","USN-5080-2","openSUSE-SU-2021:0919-1","openSUSE-SU-2021:2157-1","openSUSE-SU-2024:10941-1"],"status":"published","title":"Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks...","description":"Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm, and the window size is not chosen appropriately. This, for example, affects use of ElGamal in OpenPGP.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.0237,"percentile":0.84038,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-203","CWE-325"],"published":"2021-06-08T00:00:00Z","modified":"2026-10-29T11:01:39Z","exploits":[{"source":"pocgithub","id":"IBM/PGP-client-checker-CVE-2021-33560","title":"IBM/PGP-client-checker-CVE-2021-33560","date":"2021-07-16","url":"https://github.com/IBM/PGP-client-checker-CVE-2021-33560"}],"fixes":[{"ecosystem":"Alpine:v3.11","package":"libgcrypt","fixed_in":["1.8.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"libgcrypt","fixed_in":["1.8.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"libgcrypt","fixed_in":["1.8.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"libgcrypt","fixed_in":["1.9.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"libgcrypt","fixed_in":["1.9.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"libgcrypt","fixed_in":["1.9.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"libgcrypt","fixed_in":["1.9.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"libgcrypt","fixed_in":["1.9.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"libgcrypt","fixed_in":["1.9.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"libgcrypt","fixed_in":["1.9.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"libgcrypt","fixed_in":["1.9.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"libgcrypt","fixed_in":["1.9.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"libgcrypt","fixed_in":["1.9.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"libgcrypt","fixed_in":["1.9.4-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"libgcrypt","fixed_in":["1.8.5-6.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"libgcrypt-devel","fixed_in":["1.8.5-6.el8"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libgcrypt20","fixed_in":["1.9.4-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libgcrypt20","fixed_in":["1.9.4-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libgcrypt20","fixed_in":["1.9.4-2"],"sources":["osv"]},{"ecosystem":"Julia","package":"Libgcrypt_jll","fixed_in":["1.8.11+0"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"libgcrypt","fixed_in":["1.8.5-1.1.mga7"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"libgcrypt","fixed_in":["1.8.7-1.1.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"libgcrypt","fixed_in":["1.8.6-3.oe1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libgcrypt","fixed_in":["0:1.8.5-6.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libgcrypt-debuginfo","fixed_in":["0:1.8.5-6.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libgcrypt-debugsource","fixed_in":["0:1.8.5-6.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libgcrypt-devel","fixed_in":["0:1.8.5-6.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libgcrypt-devel-debuginfo","fixed_in":["0:1.8.5-6.el8"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"libgcrypt","fixed_in":["0:1.8.5-6.el8"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"libgcrypt20","fixed_in":["1.8.7-6.root.io.1","1.8.7-6.root.io.4","1.8.7-6.root.io.2","1.8.7-6.root.io.3","1.8.7-6.aikido.5"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"rootio-libgcrypt20","fixed_in":["1.8.7-6.root.io.1","1.8.7-6.root.io.4","1.8.7-6.root.io.2","1.8.7-6.root.io.3","1.8.7-6.aikido.5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"libgcrypt","fixed_in":["1.5.0-0.26.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"libgcrypt","fixed_in":["1.5.0-0.26.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"libgcrypt","fixed_in":["1.8.2-6.52.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"libgcrypt","fixed_in":["1.8.2-6.52.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"libgcrypt","fixed_in":["1.8.2-6.52.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"libgcrypt","fixed_in":["1.8.2-6.52.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"libgcrypt","fixed_in":["1.6.1-16.77.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"libgcrypt","fixed_in":["1.6.1-16.77.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"libgcrypt","fixed_in":["1.6.1-16.77.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"libgcrypt","fixed_in":["1.6.1-16.77.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"libgcrypt","fixed_in":["1.6.1-16.77.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"libgcrypt","fixed_in":["1.6.1-16.77.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"libgcrypt","fixed_in":["1.6.1-16.77.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"libgcrypt","fixed_in":["1.6.1-16.77.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"libgcrypt","fixed_in":["1.6.1-16.77.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"libgcrypt","fixed_in":["1.6.1-16.77.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"libgcrypt","fixed_in":["1.6.1-16.77.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"libgcrypt","fixed_in":["1.6.1-16.77.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"libgcrypt","fixed_in":["1.6.1-16.77.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"libgcrypt","fixed_in":["1.6.1-16.77.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"libgcrypt","fixed_in":["1.8.2-8.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"libgcrypt","fixed_in":["1.8.2-8.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"libgcrypt","fixed_in":["1.8.2-8.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"libgcrypt","fixed_in":["1.8.2-8.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"libgcrypt","fixed_in":["1.8.2-8.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"libgcrypt","fixed_in":["1.8.2-8.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"libgcrypt","fixed_in":["1.8.2-8.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.0","package":"libgcrypt","fixed_in":["1.8.2-8.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Retail Branch Server 4.0","package":"libgcrypt","fixed_in":["1.8.2-8.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.0","package":"libgcrypt","fixed_in":["1.8.2-8.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.0","package":"libgcrypt","fixed_in":["1.8.2-8.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 6","package":"libgcrypt","fixed_in":["1.8.2-8.39.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libgcrypt20","fixed_in":["1.6.5-2ubuntu0.6+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"libgcrypt20","fixed_in":["1.8.1-4ubuntu1.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:FIPS-updates:18.04:LTS","package":"libgcrypt20","fixed_in":["1.8.1-4ubuntu1.fips.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"libgcrypt20","fixed_in":["1.8.5-5ubuntu1.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:FIPS-updates:20.04:LTS","package":"libgcrypt20","fixed_in":["1.8.5-5ubuntu1.fips.1.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:FIPS:20.04:LTS","package":"libgcrypt20","fixed_in":["1.8.5-5ubuntu1.fips.1.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"libgcrypt20","fixed_in":["1.8.7-5ubuntu2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"libgcrypt","fixed_in":["1.8.2-lp152.17.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"libgcrypt","fixed_in":["1.8.2-8.39.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.11","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.0"},{"fixed":"1.8.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.0"},{"fixed":"1.8.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.0"},{"fixed":"1.8.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.0"},{"fixed":"1.9.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.0"},{"fixed":"1.9.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.0"},{"fixed":"1.9.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.0"},{"fixed":"1.9.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.0"},{"fixed":"1.9.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.0"},{"fixed":"1.9.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.0"},{"fixed":"1.9.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.0"},{"fixed":"1.9.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.0"},{"fixed":"1.9.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.0"},{"fixed":"1.9.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.0"},{"fixed":"1.9.4-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.5-6.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libgcrypt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.5-6.el8"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.3-14.el7.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libgcrypt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.3-14.el7.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.3-14.el7.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libgcrypt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.3-14.el7.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"Debian:12","package":"libgcrypt20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.4-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libgcrypt20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.4-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libgcrypt20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.4-2"}]}]},{"source":"osv","ecosystem":"Julia","package":"Libgcrypt_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.8.11+0"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.5-1.1.mga7"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.7-1.1.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.6-3.oe1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.5-6.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libgcrypt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.5-6.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libgcrypt-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.5-6.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libgcrypt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.5-6.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libgcrypt-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.5-6.el8"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.5-6.el8"}]}]},{"source":"osv","ecosystem":"Root:Debian:11","package":"libgcrypt20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.7-6.root.io.1"},{"fixed":"1.8.7-6.root.io.4"},{"fixed":"1.8.7-6.root.io.2"},{"fixed":"1.8.7-6.root.io.3"},{"fixed":"1.8.7-6.aikido.5"}]}]},{"source":"osv","ecosystem":"Root:Debian:11","package":"rootio-libgcrypt20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.7-6.root.io.1"},{"fixed":"1.8.7-6.root.io.4"},{"fixed":"1.8.7-6.root.io.2"},{"fixed":"1.8.7-6.root.io.3"},{"fixed":"1.8.7-6.aikido.5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-0.26.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-0.26.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2-6.52.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2-6.52.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2-6.52.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2-6.52.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-16.77.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-16.77.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-16.77.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-16.77.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-16.77.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-16.77.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-16.77.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-16.77.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-16.77.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-16.77.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-16.77.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-16.77.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-16.77.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1-16.77.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2-8.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2-8.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2-8.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2-8.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2-8.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2-8.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2-8.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.0","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2-8.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.0","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2-8.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.0","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2-8.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.0","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2-8.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2-8.39.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libgcrypt20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.5-2ubuntu0.6+esm1"}]}],"versions":["1.6.3-2ubuntu1","1.6.4-3","1.6.4-4","1.6.4-5","1.6.5-2","1.6.5-2ubuntu0.2","1.6.5-2ubuntu0.3","1.6.5-2ubuntu0.4","1.6.5-2ubuntu0.5","1.6.5-2ubuntu0.6"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libgcrypt20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-4ubuntu1.3"}]}],"versions":["1.7.8-2ubuntu1","1.7.9-1","1.8.1-4","1.8.1-4ubuntu1","1.8.1-4ubuntu1.1","1.8.1-4ubuntu1.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:18.04:LTS","package":"libgcrypt20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-4ubuntu1.fips.3"}]}],"versions":["1.8.1-4ubuntu1.fips.2.4","1.8.1-4ubuntu1.fips.2.5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS:18.04:LTS","package":"libgcrypt20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.8.1-4ubuntu1.fips.2.4","1.8.1-4ubuntu1.fips.2.5"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libgcrypt20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.5-5ubuntu1.1"}]}],"versions":["1.8.4-5ubuntu2","1.8.5-3ubuntu1","1.8.5-5ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS-updates:20.04:LTS","package":"libgcrypt20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.5-5ubuntu1.fips.1.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:FIPS:20.04:LTS","package":"libgcrypt20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.5-5ubuntu1.fips.1.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libgcrypt20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.7-5ubuntu2"}]}]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libgcrypt20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-4ubuntu1.3"}]}],"versions":["1.7.8-2ubuntu1","1.7.9-1","1.8.1-4","1.8.1-4ubuntu1","1.8.1-4ubuntu1.1","1.8.1-4ubuntu1.2"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libgcrypt20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.5-5ubuntu1.1"}]}],"versions":["1.8.4-5ubuntu2","1.8.5-3ubuntu1","1.8.5-5ubuntu1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libgcrypt20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.5-2ubuntu0.6+esm1"}]}],"versions":["1.6.3-2ubuntu1","1.6.4-3","1.6.4-4","1.6.4-5","1.6.5-2","1.6.5-2ubuntu0.2","1.6.5-2ubuntu0.3","1.6.5-2ubuntu0.4","1.6.5-2ubuntu0.5","1.6.5-2ubuntu0.6"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2-lp152.17.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2-8.39.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libgcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.4-1.2"}]}],"bundled":7}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"gnupg","product":"libgcrypt"},{"vendor":"oracle","product":"communications_cloud_native_core_binding_support_function"},{"vendor":"oracle","product":"communications_cloud_native_core_network_function_cloud_native_environment"},{"vendor":"oracle","product":"communications_cloud_native_core_network_repository_function"},{"vendor":"oracle","product":"communications_cloud_native_core_network_slice_selection_function"},{"vendor":"oracle","product":"communications_cloud_native_core_service_communication_proxy"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp"}],"references":[{"url":"https://dev.gnupg.org/T5328","tags":["x_transferred","Vendor Advisory","advisory","web","article"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/06/msg00021.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R7OAPCUGPF3VLA7QAJUQSL255D4ITVTL/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BKKTOIGFW2SGN3DO2UHHVZ7MJSYN4AAB/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2021.html","tags":["x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://dev.gnupg.org/T5466","tags":["x_transferred","Release Notes","Vendor Advisory","advisory","web"]},{"url":"https://dev.gnupg.org/T5305","tags":["x_transferred","Release Notes","Vendor Advisory","advisory","web"]},{"url":"https://dev.gnupg.org/rCe8b7f10be275bcedb5fc05ed4837a89bfd605c61","tags":["x_transferred","Patch","Vendor Advisory","fix","web"]},{"url":"https://www.oracle.com/security-alerts/cpujan2022.html","tags":["x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","tags":["x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://www.oracle.com/security-alerts/cpujul2022.html","tags":["x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://security.gentoo.org/glsa/202210-13","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-33560","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BKKTOIGFW2SGN3DO2UHHVZ7MJSYN4AAB"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R7OAPCUGPF3VLA7QAJUQSL255D4ITVTL"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BKKTOIGFW2SGN3DO2UHHVZ7MJSYN4AAB"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R7OAPCUGPF3VLA7QAJUQSL255D4ITVTL"},{"url":"https://github.com/advisories/GHSA-g9p5-p7h5-p2wg"},{"url":"https://security.alpinelinux.org/vuln/CVE-2021-33560","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2021-4409.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2021-33560","tags":["report"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2021-33560","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos7-els/CLSA-2023-1698945053.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1782731604.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-33560","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2021-0294.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=29162","tags":["report"]},{"url":"https://lists.suse.com/pipermail/sle-security-updates/2021-June/009053.html","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PPALT4SBPXXPFJVTZN5FQCXMNVH4GXCU/","tags":["web","advisory"]},{"url":"https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1243","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:4409","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.5_release_notes/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1970096","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1976137","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4409.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-33560","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-33560","tags":["advisory","report"]},{"url":"https://errata.rockylinux.org/RLSA-2021:4409","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-202114751-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1187212","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-33560","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20212155-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20212156-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20212157-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-33560","tags":["report"]},{"url":"https://eprint.iacr.org/2021/923","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5080-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5080-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-40528","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AOWBBOB3KB4MSVNKBUGK3UIYPYWCHNLS/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2017-0379","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7526","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12904","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13627","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3345","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2021-33560","description":"Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm, and the window size is not chosen appropriately. This, for example, affects use of ElGamal in OpenPGP.","status":"published","published":"2021-06-08T00:00:00Z","modified":"2026-10-14T11:39:39.511Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"adp"}],"cwes":["CWE-325"],"updated_at":"2026-11-02T14:33:10.204494Z"}],"euvd":[{"id":"EUVD-2021-20252","description":"Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm, and the window size is not chosen appropriately. This, for example, affects use of ElGamal in OpenPGP.","status":"published","published":"2021-06-08T00:00:00Z","modified":"2026-10-14T11:39:39Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T17:27:16.356399Z"}],"ghsa":[{"id":"GHSA-g9p5-p7h5-p2wg","title":"Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks...","description":"Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm, and the window size is not chosen appropriately. (There is also an interoperability problem because the selection of the k integer value does not properly consider the differences between basic ElGamal encryption and generalized ElGamal encryption.) This, for example, affects use of ElGamal in OpenPGP.","status":"published","published":"2022-05-24T19:04:21Z","modified":"2026-10-14T12:32:26Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-203","CWE-325"],"updated_at":"2026-11-02T15:13:24.812204Z"}],"nvd":[{"id":"CVE-2021-33560","description":"Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm, and the window size is not chosen appropriately. This, for example, affects use of ElGamal in OpenPGP.","status":"published","published":"2021-06-08T11:15:07.767Z","modified":"2026-10-14T12:17:12.267Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"secondary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-203","CWE-325"],"updated_at":"2026-11-02T14:06:54.439974Z"}],"osv":[{"id":"ALPINE-CVE-2021-33560","description":"Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm, and the window size is not chosen appropriately. This, for example, affects use of ElGamal in OpenPGP.","status":"published","published":"2021-06-08T11:15:07.767Z","modified":"2026-10-23T17:17:56.190711573Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:27:48.646074Z"},{"id":"BELL-CVE-2021-33560","title":"CVE-2021-33560 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:15:21.85436Z","modified":"2026-09-04T07:15:20.633730783Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:28:16.5265Z"},{"id":"CVE-2021-33560","description":"Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm, and the window size is not chosen appropriately. This, for example, affects use of ElGamal in OpenPGP.","status":"published","published":"2021-06-08T11:15:07.767Z","modified":"2026-10-24T10:30:28.639575673Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:44:20.13324Z"},{"id":"DEBIAN-CVE-2021-33560","description":"Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm, and the window size is not chosen appropriately. This, for example, affects use of ElGamal in OpenPGP.","status":"published","published":"2021-06-08T11:15:07.767Z","modified":"2026-10-15T09:47:27.598325517Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:45:35.233346Z"},{"id":"JLSEC-2026-123","description":"Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against `mpi_powm`, and the window size is not chosen appropriately. This, for example, affects use of ElGamal in OpenPGP.","status":"published","published":"2026-04-17T13:07:52.234Z","modified":"2026-07-25T18:23:55.217939838Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:47:18.159338Z"},{"id":"OESA-2021-1243","title":"libgcrypt security update","description":"Libgcrypt is a general purpose cryptographic library originally based on code from GnuPG.\r\n\r\nSecurity Fix(es):\r\n\r\nLibgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm, and the window size is not chosen appropriately. (There is also an interoperability problem because the selection of the k integer value does not properly consider the differences between basic ElGamal encryption and generalized ElGamal encryption.) This, for example, affects use of ElGamal in OpenPGP.(CVE-2021-33560)","status":"published","published":"2021-06-26T11:04:29Z","modified":"2026-08-18T01:15:45.494156561Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"RHSA-2021:4409","title":"Red Hat Security Advisory: libgcrypt security and bug fix update","status":"published","published":"2024-09-16T05:53:37Z","modified":"2025-12-04T11:46:06.287549Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RLSA-2021:4409","title":"Moderate: libgcrypt security and bug fix update","description":"The libgcrypt library provides general-purpose implementations of various cryptographic algorithms.\n\nSecurity Fix(es):\n\n* libgcrypt: mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm (CVE-2021-33560)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.5 Release Notes linked from the References section.","status":"published","published":"2021-11-09T09:18:49Z","modified":"2026-02-04T18:00:05.664767Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2021-33560","description":"Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm, and the window size is not chosen appropriately. This, for example, affects use of ElGamal in OpenPGP.","status":"published","published":"2021-06-08T11:15:00Z","modified":"2026-04-22T12:54:29.113209Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:54:27.870979Z"},{"id":"ALSA-2021:4409","title":"Moderate: libgcrypt security and bug fix update","description":"The libgcrypt library provides general-purpose implementations of various cryptographic algorithms.\n\nSecurity Fix(es):\n\n* libgcrypt: mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm (CVE-2021-33560)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2021-11-09T09:18:49Z","modified":"2026-10-29T11:01:39.859497077Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"CLSA-2023-1698945053","title":"libgcrypt: Fix of 4 CVEs","description":"- CVE-2013-4576: Normalize the MPIs to prevent possible side-channel\n  attacks\n- CVE-2014-3591: Use ciphertext blinding for Elgamal to prevent\n  possible side-channel attacks\n- CVE-2021-33560: Use of smaller K for ephemeral key in ElGamal\n  prevent generation of weak keys\n- CVE-2021-40528: Add exponent blinding as well to mitigate\n  side-channel attack on mpi_powm\n- tests: Add a benchmark for Elgamal","status":"published","published":"2023-11-02T17:10:57Z","modified":"2026-06-01T00:33:17.284256741Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"CLSA-2026-1782731604","title":"libgcrypt: Fix of CVE-2021-33560","description":"- CVE-2013-4576: Normalize the MPIs to prevent possible side-channel\n  attacks\n- CVE-2014-3591: Use ciphertext blinding for Elgamal to prevent\n  possible side-channel attacks\n- CVE-2021-33560: Use of smaller K for ephemeral key in ElGamal\n  prevent generation of weak keys\n- CVE-2021-40528: Add exponent blinding as well to mitigate\n  side-channel attack on mpi_powm\n- tests: Add a benchmark for Elgamal","status":"published","published":"2026-06-29T11:13:40Z","modified":"2026-10-26T09:43:35.904800852Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"MGASA-2021-0294","title":"Updated libgcrypt packages fix a security vulnerability","description":"Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption\nbecause it lacks exponent blinding to address a side-channel attack against\nmpi_powm, and the window size is not chosen appropriately (CVE-2021-33560).\n","status":"published","published":"2021-06-28T21:16:35Z","modified":"2026-04-16T04:40:57.056967182Z","updated_at":"2026-11-02T15:49:41.509337Z"},{"id":"openSUSE-SU-2021:0919-1","title":"Security update for libgcrypt","description":"This update for libgcrypt fixes the following issues:\n\n- CVE-2021-33560: Fixed a side-channel against ElGamal encryption, caused by missing exponent blinding (bsc#1187212).\n\nThis update was imported from the SUSE:SLE-15-SP1:Update update project.","status":"published","published":"2021-06-25T06:14:59Z","modified":"2026-02-04T02:49:02.062471Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"openSUSE-SU-2021:2157-1","title":"Security update for libgcrypt","description":"This update for libgcrypt fixes the following issues:\n\n- CVE-2021-33560: Fixed a side-channel against ElGamal encryption, caused by missing exponent blinding (bsc#1187212).\n","status":"published","published":"2021-07-11T09:21:27Z","modified":"2026-02-04T02:32:48.968514Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2024:10941-1","title":"libgcrypt-cavs-1.9.4-1.2 on GA media","description":"These are all security issues fixed in the libgcrypt-cavs-1.9.4-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:35:52.263076Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"ROOT-OS-DEBIAN-11-CVE-2021-33560","title":"CVE-2021-33560 in libgcrypt20 - Patched by Root","description":"Root has patched CVE-2021-33560 in the libgcrypt20 package for Root:Debian:11. Multiple fixed versions available.","status":"published","published":"2026-08-20T13:49:55Z","modified":"2026-08-20T15:00:06.281407527Z","updated_at":"2026-11-02T15:53:28.544053Z"},{"id":"SUSE-SU-2021:14751-1","title":"Security update for libgcrypt","description":"This update for libgcrypt fixes the following issues:\n\n- CVE-2021-33560: Fixed a side-channel against ElGamal encryption, caused by missing exponent blinding (bsc#1187212).\n","status":"published","published":"2021-06-18T14:22:32Z","modified":"2026-02-04T02:45:11.034701Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"SUSE-SU-2021:2155-1","title":"Security update for libgcrypt","description":"This update for libgcrypt fixes the following issues:\n\n- CVE-2021-33560: Fixed a side-channel against ElGamal encryption, caused by missing exponent blinding (bsc#1187212).\n","status":"published","published":"2021-06-24T13:38:33Z","modified":"2026-02-04T02:49:33.400199Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"SUSE-SU-2021:2156-1","title":"Security update for libgcrypt","description":"This update for libgcrypt fixes the following issues:\n\n- CVE-2021-33560: Fixed a side-channel against ElGamal encryption, caused by missing exponent blinding (bsc#1187212).\n","status":"published","published":"2021-06-24T13:39:48Z","modified":"2026-02-04T02:59:13.243798Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"SUSE-SU-2021:2157-1","title":"Security update for libgcrypt","description":"This update for libgcrypt fixes the following issues:\n\n- CVE-2021-33560: Fixed a side-channel against ElGamal encryption, caused by missing exponent blinding (bsc#1187212).\n","status":"published","published":"2021-06-24T13:40:49Z","modified":"2026-02-04T02:25:48.438088Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"USN-5080-1","title":"libgcrypt20 vulnerabilities","description":"It was discovered that Libgcrypt incorrectly handled ElGamal encryption. An\nattacker could possibly use this issue to recover sensitive information.\n","status":"published","published":"2021-09-16T11:12:40Z","modified":"2026-04-27T15:56:47.190896Z","updated_at":"2026-11-02T16:58:15.683829Z"},{"id":"USN-5080-2","title":"libgcrypt20 vulnerabilities","description":"USN-5080-1 fixed several vulnerabilities in Libgcrypt. This update provides\nthe corresponding update for Ubuntu 16.04 ESM.\n\nOriginal advisory details:\n\n It was discovered that Libgcrypt incorrectly handled ElGamal encryption. An\n attacker could possibly use this issue to recover sensitive information.\n","status":"published","published":"2021-09-16T16:07:21Z","modified":"2026-06-25T13:30:48.098616828Z","updated_at":"2026-11-02T16:58:15.683829Z"}]}}