p PatchFirst

ALPINE-CVE-2016-6313

ALPINE-CVE-2016-6313

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The mixing functions in the random number generator in Libgcrypt before 1.5.6, 1.6.x before 1.6.6, and 1.7.x before 1.7.3 and GnuPG before 1.4.21 make it easier for attackers to obtain the values of 160 bits by leveraging knowledge of the previous 4640 bits.

CVSS 5.3 · Medium · Fix available

Published
Updated

Stack: system

Affected products and versions

  • libgcrypt Alpine:v3.4

    Affected ranges
    • ECOSYSTEM: < 1.7.0-r1

    Update to 1.7.0-r1

Original sources

Check your server →