CVE-2019-13627

· MEDIUMModified

← All CVEs

CVSS v3.1

6.3

EPSS

0.51%

Published

Sep 25, 2019

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

It was discovered that there was a ECDSA timing attack in the libgcrypt20 cryptographic library. Version affected: 1.8.4-5, 1.7.6-2+deb9u3, and 1.6.3-2+deb8u4. Versions fixed: 1.8.5-2 and 1.6.3-2+deb8u7.

CVSS Vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

Weaknesses (CWE)

CWE-203

Affected Products (14)

canonical · ubuntu_linuxvulnerable

opensuse · leapvulnerable

libgcrypt20_project · libgcrypt20vulnerable

debian · debian_linux

libgcrypt20_project · libgcrypt20vulnerable

debian · debian_linux

libgcrypt20_project · libgcrypt20vulnerable

debian · debian_linux

References (20)

http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00060.html

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00018.html

Third Party Advisory

http://www.openwall.com/lists/oss-security/2019/10/02/2

Mailing ListThird Party Advisory

https://github.com/gpg/libgcrypt/releases/tag/libgcrypt-1.8.5

Third Party Advisory

https://lists.debian.org/debian-lts-announce/2019/09/msg00024.html

Mailing ListThird Party Advisory

https://lists.debian.org/debian-lts-announce/2020/01/msg00001.html

Third Party Advisory

https://minerva.crocs.fi.muni.cz/

Third Party Advisory

https://security-tracker.debian.org/tracker/CVE-2019-13627

Third Party Advisory

https://security.gentoo.org/glsa/202003-32

Third Party Advisory

https://usn.ubuntu.com/4236-1/

Third Party Advisory

https://usn.ubuntu.com/4236-2/

Third Party Advisory

https://usn.ubuntu.com/4236-3/

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00060.html

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00018.html

Third Party Advisory

http://www.openwall.com/lists/oss-security/2019/10/02/2

Mailing ListThird Party Advisory

https://github.com/gpg/libgcrypt/releases/tag/libgcrypt-1.8.5

Third Party Advisory

https://lists.debian.org/debian-lts-announce/2019/09/msg00024.html

Mailing ListThird Party Advisory

https://lists.debian.org/debian-lts-announce/2020/01/msg00001.html

Third Party Advisory

https://minerva.crocs.fi.muni.cz/

Third Party Advisory

https://security-tracker.debian.org/tracker/CVE-2019-13627

Third Party Advisory

KEV Catalog EPSS Scores Vendors All CVEs