138 lines
3.4 KiB
JSON
138 lines
3.4 KiB
JSON
{
|
|
"schema_version": "1.7.0",
|
|
"id": "USN-3065-1",
|
|
"summary": "libgcrypt11, libgcrypt20 vulnerability",
|
|
"details": "Felix D\u00f6rre and Vladimir Klebanov discovered that Libgcrypt incorrectly\nhandled mixing functions in the random number generator. An attacker able\nto obtain 4640 bits from the RNG can trivially predict the next 160 bits of\noutput.\n",
|
|
"aliases": [],
|
|
"upstream": [
|
|
"UBUNTU-CVE-2016-6313"
|
|
],
|
|
"related": [],
|
|
"published": "2016-08-18T18:32:29Z",
|
|
"modified": "2026-04-22T07:36:33Z",
|
|
"affected": [
|
|
{
|
|
"package": {
|
|
"ecosystem": "Ubuntu:14.04:LTS",
|
|
"name": "libgcrypt11",
|
|
"purl": "pkg:deb/ubuntu/libgcrypt11@1.5.3-2ubuntu4.4?arch=source&distro=trusty"
|
|
},
|
|
"ranges": [
|
|
{
|
|
"type": "ECOSYSTEM",
|
|
"events": [
|
|
{
|
|
"introduced": "0"
|
|
},
|
|
{
|
|
"fixed": "1.5.3-2ubuntu4.4"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"versions": [
|
|
"1.5.0-3ubuntu3",
|
|
"1.5.3-2ubuntu1",
|
|
"1.5.3-2ubuntu4",
|
|
"1.5.3-2ubuntu4.1",
|
|
"1.5.3-2ubuntu4.2",
|
|
"1.5.3-2ubuntu4.3"
|
|
],
|
|
"ecosystem_specific": {
|
|
"binaries": [
|
|
{
|
|
"binary_name": "libgcrypt11",
|
|
"binary_version": "1.5.3-2ubuntu4.4"
|
|
}
|
|
],
|
|
"availability": "No subscription required"
|
|
},
|
|
"database_specific": {
|
|
"cves_map": {
|
|
"ecosystem": "Ubuntu:14.04:LTS",
|
|
"cves": [
|
|
{
|
|
"id": "CVE-2016-6313",
|
|
"severity": [
|
|
{
|
|
"type": "CVSS_V3",
|
|
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
|
|
},
|
|
{
|
|
"type": "Ubuntu",
|
|
"score": "high"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"package": {
|
|
"ecosystem": "Ubuntu:16.04:LTS",
|
|
"name": "libgcrypt20",
|
|
"purl": "pkg:deb/ubuntu/libgcrypt20@1.6.5-2ubuntu0.2?arch=source&distro=xenial"
|
|
},
|
|
"ranges": [
|
|
{
|
|
"type": "ECOSYSTEM",
|
|
"events": [
|
|
{
|
|
"introduced": "0"
|
|
},
|
|
{
|
|
"fixed": "1.6.5-2ubuntu0.2"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"versions": [
|
|
"1.6.3-2ubuntu1",
|
|
"1.6.4-3",
|
|
"1.6.4-4",
|
|
"1.6.4-5",
|
|
"1.6.5-2"
|
|
],
|
|
"ecosystem_specific": {
|
|
"binaries": [
|
|
{
|
|
"binary_name": "libgcrypt20",
|
|
"binary_version": "1.6.5-2ubuntu0.2"
|
|
}
|
|
],
|
|
"availability": "No subscription required"
|
|
},
|
|
"database_specific": {
|
|
"cves_map": {
|
|
"ecosystem": "Ubuntu:16.04:LTS",
|
|
"cves": [
|
|
{
|
|
"id": "CVE-2016-6313",
|
|
"severity": [
|
|
{
|
|
"type": "CVSS_V3",
|
|
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
|
|
},
|
|
{
|
|
"type": "Ubuntu",
|
|
"score": "high"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
}
|
|
}
|
|
],
|
|
"references": [
|
|
{
|
|
"type": "ADVISORY",
|
|
"url": "https://ubuntu.com/security/notices/USN-3065-1"
|
|
},
|
|
{
|
|
"type": "REPORT",
|
|
"url": "https://ubuntu.com/security/CVE-2016-6313"
|
|
}
|
|
]
|
|
} |