ALPINE-CVE-2021-40528

ALPINE-CVE-2021-40528

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction between two cryptographic libraries, a certain dangerous combination of the prime defined by the receiver's public key, the generator defined by the receiver's public key, and the sender's ephemeral exponents can lead to a cross-configuration attack against OpenPGP.

CVSS 5.9 · Medium · Fix available

Published

2021-09-06T19:15:07.587Z

Updated

2026-10-23T17:17:56.210749993Z

Stack: system

Check your server →