2 lines
5.1 KiB
JSON
2 lines
5.1 KiB
JSON
{"affected":[{"affectedData":[{"product":"libgcrypt","vendor":"n/a","versions":[{"status":"affected","version":"libgcrypt"}]}],"source":"security@debian.org"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:gnupg:libgcrypt:*:*:*:*:*:*:*:*","matchCriteriaId":"C3EDDB00-5923-4D66-B2A2-AB9AB5C5FF03","versionEndIncluding":"1.8.0","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"DEECE5FC-CACF-4496-A3E7-164736409252","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it easier for attackers to discover a secret key, related to cipher/ecc.c and mpi/ec.c."},{"lang":"es","value":"Libgcrypt en versiones anteriores a la 1.8.1 no considera correctamente ataques de canal lateral Curve25519, lo que facilita que los atacantes descubran una clave secreta relacionada con cipher/ecc.c y mpi/ec.c."}],"id":"CVE-2017-0379","lastModified":"2026-06-17T00:57:36.117","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"NONE","baseScore":5.0,"confidentialityImpact":"PARTIAL","integrityImpact":"NONE","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","version":"2.0"},"exploitabilityScore":10.0,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.0"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2017-08-29T22:29:00.173","references":[{"source":"security@debian.org","url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"},{"source":"security@debian.org","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/100503"},{"source":"security@debian.org","url":"http://www.securitytracker.com/id/1041294"},{"source":"security@debian.org","tags":["Issue Tracking","Third Party Advisory"],"url":"https://bugs.debian.org/873383"},{"source":"security@debian.org","tags":["Mailing List","Third Party Advisory"],"url":"https://eprint.iacr.org/2017/806"},{"source":"security@debian.org","url":"https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git%3Ba=commit%3Bh=da780c8183cccc8f533c8ace8211ac2cb2bdee7b"},{"source":"security@debian.org","tags":["Mailing List","Patch","Third Party Advisory"],"url":"https://lists.debian.org/debian-security-announce/2017/msg00221.html"},{"source":"security@debian.org","tags":["Patch","Third Party Advisory"],"url":"https://security-tracker.debian.org/tracker/CVE-2017-0379"},{"source":"security@debian.org","url":"https://security.netapp.com/advisory/ntap-20180726-0002/"},{"source":"security@debian.org","tags":["Patch","Third Party Advisory"],"url":"https://www.debian.org/security/2017/dsa-3959"},{"source":"security@debian.org","url":"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/100503"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"http://www.securitytracker.com/id/1041294"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"],"url":"https://bugs.debian.org/873383"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"url":"https://eprint.iacr.org/2017/806"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git%3Ba=commit%3Bh=da780c8183cccc8f533c8ace8211ac2cb2bdee7b"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"],"url":"https://lists.debian.org/debian-security-announce/2017/msg00221.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"],"url":"https://security-tracker.debian.org/tracker/CVE-2017-0379"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://security.netapp.com/advisory/ntap-20180726-0002/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"],"url":"https://www.debian.org/security/2017/dsa-3959"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html"}],"sourceIdentifier":"security@debian.org","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-200"}],"source":"nvd@nist.gov","type":"Primary"}]}
|