The remote host is affected by the vulnerability described in GLSA-201408-10 (Libgcrypt: Side-channel attack)

    A vulnerability in the implementation of ElGamal decryption procedures       of Libgcrypt leaks information to various side-channels.
  Impact :

    A physical side-channel attack allows a remote attacker to fully extract       decryption keys during the decryption of a chosen ciphertext.
  Workaround :

    There is no known workaround at this time.

This libgcrypt update fixes the following security issue :

  - Side-channel attack on Elgamal encryption subkeys.
    (CVE-2014-5270). (bnc#892464)

Genkin, Pipman and Tromer discovered a side-channel attack on Elgamal encryption subkeys (CVE-2014-5270 ).

In addition, this update hardens GnuPG's behaviour when treating keyserver responses; GnuPG now filters keyserver responses to only accepts those keyid's actually requested by the user.

According to the versions of the libgcrypt package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - Libgcrypt before 1.5.4, as used in GnuPG and other     products, does not properly perform ciphertext     normalization and ciphertext randomization, which makes     it easier for physically proximate attackers to conduct     key-extraction attacks by leveraging the ability to     collect voltage data from exposed metal, a different     vector than CVE-2013-4576.(CVE-2014-5270)

  - libgcrypt before version 1.7.8 is vulnerable to a cache     side-channel attack resulting into a complete break of     RSA-1024 while using the left-to-right method for     computing the sliding-window expansion. The same attack     is believed to work on RSA-2048 with moderately more     computation. This side-channel requires that attacker     can run arbitrary software on the hardware where the     private RSA key is used.(CVE-2017-7526)

  - Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not     implement ciphertext blinding for Elgamal decryption,     which allows physically proximate attackers to obtain     the server's private key by determining factors using     crafted ciphertext and the fluctuations in the     electromagnetic field during     multiplication.(CVE-2014-3591)

  - The mpi_powm function in Libgcrypt before 1.6.3 and     GnuPG before 1.4.19 allows attackers to obtain     sensitive information by leveraging timing differences     when accessing a pre-computed table during modular     exponentiation, related to a 'Last-Level Cache     Side-Channel Attack.'(CVE-2015-0837)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Libgcrypt before 1.5.4, as used in GnuPG and other products, does not properly perform ciphertext     normalization and ciphertext randomization, which makes it easier for physically proximate attackers to     conduct key-extraction attacks by leveraging the ability to collect voltage data from exposed metal, a     different vector than CVE-2013-4576. (CVE-2014-5270)

Note that Nessus relies on the presence of the package as reported by the vendor.

Daniel Genkin, Itamar Pipman and Eran Tromer discovered that Elgamal encryption subkeys in applications using the libgcrypt11 library, for example GnuPG 2.x, could be leaked via a side-channel attack.

Fix a side-channel attack on data-dependent timing variations in modular exponentiation, which can potentially lead to an information leak. (CVE-2015-0837)

Fix a side-channel attack which can potentially lead to an information leak. (CVE-2014-3591)

Libgcrypt before 1.5.4, as used in GnuPG and other products, does not properly perform ciphertext normalization and ciphertext randomization, which makes it easier for physically proximate attackers to conduct key-extraction attacks by leveraging the ability to collect voltage data from exposed metal, a different vector than CVE-2013-4576 , which was fixed in ALAS-2014-278. (CVE-2014-5270)

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
77454	GLSA-201408-10 : Libgcrypt: Side-channel attack	Nessus	Gentoo Local Security Checks	2014/8/30	2021/1/6	low
77472	SuSE 11.3 Security Update : libgcrypt (SAT Patch Number 9646)	Nessus	SuSE Local Security Checks	2014/9/2	2021/1/19	low
77671	Debian DSA-3024-1 : gnupg - security update	Nessus	Debian Local Security Checks	2014/9/14	2021/1/11	low
135660	EulerOS Virtualization 3.0.2.2 : libgcrypt (EulerOS-SA-2020-1498)	Nessus	Huawei Local Security Checks	2020/4/16	2025/2/21	medium
218347	Linux Distros Unpatched Vulnerability : CVE-2014-5270	Nessus	Misc.	2025/3/4	2025/9/29	high
79255	Debian DSA-3073-1 : libgcrypt11 - security update	Nessus	Debian Local Security Checks	2014/11/17	2021/1/11	low
85232	Amazon Linux AMI : libgcrypt (ALAS-2015-577)	Nessus	Amazon Linux Local Security Checks	2015/8/5	2019/12/16	medium

检测

插件搜索

low

low

low

medium

high

low

medium