Affected: AlmaLinux:8: libgcrypt, AlmaLinux:8: libgcrypt-devel

The libgcrypt library provides general-purpose implementations of various cryptographic algorithms. Security Fix(es): * libgcrypt: ElGamal implementation allows plaintext recovery (CVE-2021-40528) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Withdrawn by the publisher.

The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction between two cryptographic libraries, a certain dangerous combination of the prime defined by the receiver's public key, the generator defined by the receiver's public key, and the sender's ephemeral exponents can lead to a cross-configuration attack against OpenPGP.

The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction between two cryptographic libraries, a certain dangerous combination of the prime defined by the receiver's public key, the generator defined by the receiver's public key, and the sender's ephemeral exponents can lead to a cross-configuration attack against OpenPGP.

Affected: openEuler:20.03-LTS-SP1: libgcrypt, openEuler:20.03-LTS-SP2: libgcrypt

Libgcrypt is a general purpose cryptographic library originally based on code from GnuPG. Security Fix(es): The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction between two cryptographic libraries, a certain dangerous combination of the prime defined by the receiver's public key, the generator defined by the receiver's public key, and the sender's ephemeral exponents can lead to a cross-configuration attack against OpenPGP.(CVE-2021-40528)

libgcrypt-devel-1.10.1-1.1 on GA media

Affected: Ubuntu:Pro:16.04:LTS: libgcrypt20, Ubuntu:18.04:LTS: libgcrypt20, Ubuntu:Pro:FIPS-updates:18.04:LTS: libgcrypt20, Ubuntu:Pro:FIPS:18.04:LTS: libgcrypt20, Ubuntu:20.04:LTS: libgcrypt20, Ubuntu:Pro:FIPS-updates:20.04:LTS: libgcrypt20, Ubuntu:Pro:FIPS:20.04:LTS: libgcrypt20, Ubuntu:22.04:LTS: libgcrypt20

The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction between two cryptographic libraries, a certain dangerous combination of the prime defined by the receiver's public key, the generator defined by the receiver's public key, and the sender's ephemeral exponents can lead to a cross-configuration attack against OpenPGP.

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Communications ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.