ALPINE-CVE-2018-0495
ALPINE-CVE-2018-0495
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing process in the _gcry_ecc_ecdsa_sign function in cipher/ecc-ecdsa.c, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.
CVSS 4.7 · Medium · Fix available
- Published
- Updated
Stack: system
Affected products and versions
libgcrypt Alpine:v3.10
- Affected ranges
- ECOSYSTEM: ≥ 1.8.0, < 1.8.3-r0
Update to 1.8.3-r0
libgcrypt Alpine:v3.11
- Affected ranges
- ECOSYSTEM: ≥ 1.8.0, < 1.8.3-r0
Update to 1.8.3-r0
libgcrypt Alpine:v3.12
- Affected ranges
- ECOSYSTEM: ≥ 1.8.0, < 1.8.3-r0
Update to 1.8.3-r0
libgcrypt Alpine:v3.13
- Affected ranges
- ECOSYSTEM: ≥ 1.8.0, < 1.8.3-r0
Update to 1.8.3-r0
libgcrypt Alpine:v3.14
- Affected ranges
- ECOSYSTEM: ≥ 1.8.0, < 1.8.3-r0
Update to 1.8.3-r0
libgcrypt Alpine:v3.15
- Affected ranges
- ECOSYSTEM: ≥ 1.8.0, < 1.8.3-r0
Update to 1.8.3-r0
libgcrypt Alpine:v3.16
- Affected ranges
- ECOSYSTEM: ≥ 1.8.0, < 1.8.3-r0
Update to 1.8.3-r0
libgcrypt Alpine:v3.17
- Affected ranges
- ECOSYSTEM: ≥ 1.8.0, < 1.8.3-r0
Update to 1.8.3-r0
libgcrypt Alpine:v3.18
- Affected ranges
- ECOSYSTEM: ≥ 1.8.0, < 1.8.3-r0
Update to 1.8.3-r0
libgcrypt Alpine:v3.19
- Affected ranges
- ECOSYSTEM: ≥ 1.8.0, < 1.8.3-r0
Update to 1.8.3-r0
libgcrypt Alpine:v3.20
- Affected ranges
- ECOSYSTEM: ≥ 1.8.0, < 1.8.3-r0
Update to 1.8.3-r0
libgcrypt Alpine:v3.21
- Affected ranges
- ECOSYSTEM: ≥ 1.8.0, < 1.8.3-r0
Update to 1.8.3-r0
libgcrypt Alpine:v3.22
- Affected ranges
- ECOSYSTEM: ≥ 1.8.0, < 1.8.3-r0
Update to 1.8.3-r0
libgcrypt Alpine:v3.23
- Affected ranges
- ECOSYSTEM: ≥ 1.8.0, < 1.8.3-r0
Update to 1.8.3-r0
libgcrypt Alpine:v3.24
- Affected ranges
- ECOSYSTEM: ≥ 1.8.0, < 1.8.3-r0
Update to 1.8.3-r0
libgcrypt Alpine:v3.5
- Affected ranges
- ECOSYSTEM: ≥ 1.8.0, < 1.7.10-r0
Update to 1.7.10-r0
libgcrypt Alpine:v3.6
- Affected ranges
- ECOSYSTEM: ≥ 1.8.0, < 1.7.10-r0
Update to 1.7.10-r0
libgcrypt Alpine:v3.7
- Affected ranges
- ECOSYSTEM: ≥ 1.8.0, < 1.8.3-r0
Update to 1.8.3-r0
libgcrypt Alpine:v3.8
- Affected ranges
- ECOSYSTEM: ≥ 1.8.0, < 1.8.3-r0
Update to 1.8.3-r0
libgcrypt Alpine:v3.9
- Affected ranges
- ECOSYSTEM: ≥ 1.8.0, < 1.8.3-r0
Update to 1.8.3-r0
libressl Alpine:v3.10
- Affected ranges
- ECOSYSTEM: < 2.7.4-r0
Update to 2.7.4-r0
libressl Alpine:v3.11
- Affected ranges
- ECOSYSTEM: < 2.7.4-r0
Update to 2.7.4-r0
libressl Alpine:v3.12
- Affected ranges
- ECOSYSTEM: < 2.7.4-r0
Update to 2.7.4-r0
libressl Alpine:v3.13
- Affected ranges
- ECOSYSTEM: < 2.7.4-r0
Update to 2.7.4-r0