Known vulnerabilities in Libgcrypt

Vendor: GNU
Software: Libgcrypt
Software CPE: cpe:2.3:a:gnu:libgcrypt:*:*:*:*:*:*:*:*
Website: https://www.gnu.org/
Total vulnerabilities: 14
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Libgcrypt Libgcrypt is affected by 14 known vulnerabilities: 1 high, 5 medium, 8 low Critical High Medium Low

Vulnerabilities (14)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU87339 - Information Exposure Through Timing Discrepancy
CVE-2024-2236		 CWE-208 Medium
No
No
 - 11.03.2024 SB2024031137
SB2024031141
SB2024111242
and 58 more
#VU56685 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2021-40528		 CWE-327 Medium
No
No
 1.9.4 17.09.2021 SB2021091710
SB2021091711
SB2021091629
and 44 more
#VU56684 - Observable discrepancy
CVE-2021-33560		 CWE-203 Medium
No
No
 1.8.8, 1.9.3 17.09.2021 SB2021060846
SB2021091711
SB2021111210
and 22 more
#VU50150 - Heap-based Buffer Overflow
CVE-2021-3345		 CWE-122 High
Available
No
 1.9.1 29.01.2021 SB2021013004
SB2021013005
SB2021072122
#VU24721 - Cryptographic Issues
CVE-2019-13627		 CWE-310 Low
No
No
 1.8.5 29.01.2020 SB2019092519
SB2020011468
SB2019092430
and 10 more
#VU33175 - Cryptographic Issues
CVE-2019-12904		 CWE-310 Medium
No
No
 1.8.5 20.06.2019 SB2019062010
SB2019072324
SB2019072815
#VU11129 - Exposure of sensitive information to an unauthorized actor
CVE-2018-6829		 CWE-200 Low
No
No
 - 16.03.2018 SB2018020823
SB2020011452
#VU32070 - Exposure of sensitive information to an unauthorized actor
CVE-2017-0379		 CWE-200 Medium
No
No
 1.8.1 30.08.2017 SB2017083008
SB2017091920
SB2017091821
and 6 more
#VU7299 - Cryptographic Issues
CVE-2017-9526		 CWE-310 Low
No
No
 - 03.07.2017 SB2017060233
SB2017070401
SB2017061411
and 1 more
#VU7276 - Cryptographic Issues
CVE-2017-7526		 CWE-310 Low
No
No
 - 30.06.2017 SB2017063015
SB2017063016
SB2017070304
and 8 more
#VU327 - Use of Insufficiently Random Values
CVE-2016-6313		 CWE-330 Low
No
No
 - 18.08.2016 SB2016081701
SB2016081702
SB2016081807
and 17 more
#VU32337 - Exposure of sensitive information to an unauthorized actor
CVE-2015-7511		 CWE-200 Low
No
No
 1.6.5 20.04.2016 SB2016042002
SB2016021803
SB2016022312
and 2 more
#VU32505 - Exposure of sensitive information to an unauthorized actor
CVE-2014-5270		 CWE-200 Low
No
No
 1.5.4 10.10.2014 SB2014101003
SB2014082102
SB2015080406
and 1 more
#VU32638 - Exposure of sensitive information to an unauthorized actor
CVE-2013-4242		 CWE-200 Low
No
No
 1.5.3 20.08.2013 SB2013082001
SB2013080503
SB2013091903
and 3 more