NetSight
IP …
high7.5

CVE-2021-33560

Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_pow…

Impact

Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm, and the window size is not chosen appropriately. This, for example, affects use of ElGamal in OpenPGP.

Affected products

VendorProductAffected versions
GnupgLibgcrypt
before 1.8.8
from 1.9.0 before 1.9.3
DebianDebian Linux
Version 9.0
FedoraprojectFedora
Versions 33, 34
OracleCommunications Cloud Native Core Binding Support Function
Version 1.11.0
OracleCommunications Cloud Native Core Network Function Cloud Native Environment
Versions 1.9.0, 1.10.0
OracleCommunications Cloud Native Core Network Repository Function
Versions 1.14.0, 1.15.0, 1.15.1
OracleCommunications Cloud Native Core Network Slice Selection Function
Version 1.8.0
OracleCommunications Cloud Native Core Service Communication Proxy
Version 1.15.0

Weakness classification

CWE-203CWE-325

References