An update for libgcrypt is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The libgcrypt library provides general-purpose implementations of various cryptographic algorithms.

Security Fix(es) :

* A design flaw was found in the libgcrypt PRNG (Pseudo-Random Number Generator). An attacker able to obtain the first 580 bytes of the PRNG output could predict the following 20 bytes. (CVE-2016-6313)

Red Hat would like to thank Felix Dorre and Vladimir Klebanov for reporting this issue.

Important update from upstream which fixes predictability problem in the RNG (CVE-2016-6313).

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201612-01 (GnuPG: RNG output is predictable)

    A long standing bug (since 1998) in Libgcrypt (see &ldquo;GLSA 201610-04&rdquo;
      below) and GnuPG allows an attacker to predict the output from the       standard RNG. Please review the &ldquo;Entropy Loss and Output Predictability       in the Libgcrypt PRNG&rdquo; paper below for a deep technical analysis.
  Impact :

    An attacker who obtains 580 bytes of the random number from the standard       RNG can trivially predict the next 20 bytes of output.
    This flaw does not affect the default generation of keys, because       running gpg for key creation creates at most 2 keys from the pool. For a       single 4096 bit RSA key, 512 bytes of random are required and thus for       the second key (encryption subkey), 20 bytes could be predicted from the       the first key.
    However, the security of an OpenPGP key depends on the primary key       (which was generated first) and thus the 20 predictable bytes should not       be a problem.  For the default key length of 2048 bit nothing will be       predictable.
  Workaround :

    There is no known workaround at this time.

According to the version of the libgcrypt packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - A design flaw was found in the libgcrypt PRNG     (Pseudo-Random Number Generator). An attacker able to     obtain the first 580 bytes of the PRNG output could     predict the following 20 bytes.(CVE-2016-6313)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3064-1 advisory.

    Felix Drre and Vladimir Klebanov discovered that GnuPG incorrectly handled mixing functions in the     random number generator. An attacker able to obtain 4640 bits from the RNG can trivially predict the next     160 bits of output.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

New libgcrypt packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix a security issue.

Security Fix(es) :

  - A design flaw was found in the libgcrypt PRNG     (Pseudo-Random Number Generator). An attacker able to     obtain the first 580 bytes of the PRNG output could     predict the following 20 bytes. (CVE-2016-6313)

This update for libgcrypt fixes the following issues :

  - RNG prediction vulnerability (bsc#994157, CVE-2016-6313)

This update was imported from the SUSE:SLE-12:Update update project.

An update of [cracklib,libevent,libgcrypt,httpd,glibc] packages for PhotonOS has been released.

Felix Doerre and Vladimir Klebanov from the Karlsruhe Institute of Technology discovered a flaw in the mixing functions of Libgcrypt's random number generator. An attacker who obtains 4640 bits from the RNG can trivially predict the next 160 bits of output.

A first analysis on the impact of this bug for GnuPG shows that existing RSA keys are not weakened. For DSA and Elgamal keys it is also unlikely that the private key can be predicted from other public information.

Werner Koch reports :

There was a bug in the mixing functions of Libgcrypt's random number generator: An attacker who obtains 4640 bits from the RNG can trivially predict the next 160 bits of output. This bug exists since 1998 in all GnuPG and Libgcrypt versions.

New gnupg packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix a security issue.

A design flaw was found in the libgcrypt PRNG (Pseudo-Random Number Generator). An attacker who can obtain the first 580 bytes of the PRNG output can trivially predict the following 20 bytes.

The remote OracleVM system is missing necessary patches to address critical security updates :

  - fix CVE-2016-6313 - predictable PRNG output (#1366105)

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
94741	CentOS 6 / 7 : libgcrypt (CESA-2016:2674)	Nessus	CentOS Local Security Checks	2016/11/14	2021/1/4	medium
94850	Fedora 25 : libgcrypt (2016-b66a0aef08)	Nessus	Fedora Local Security Checks	2016/11/15	2026/1/19	medium
95516	GLSA-201612-01 : GnuPG: RNG output is predictable	Nessus	Gentoo Local Security Checks	2016/12/5	2026/1/15	medium
99841	EulerOS 2.0 SP1 : libgcrypt (EulerOS-SA-2016-1081)	Nessus	Huawei Local Security Checks	2017/5/1	2025/12/22	medium
93045	Ubuntu 14.04 LTS / 16.04 LTS : GnuPG vulnerability (USN-3064-1)	Nessus	Ubuntu Local Security Checks	2016/8/19	2024/8/27	medium
93081	Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / 14.2 / current : libgcrypt (SSA:2016-236-02)	Nessus	Slackware Local Security Checks	2016/8/24	2026/1/28	medium
94652	Scientific Linux Security Update : libgcrypt on SL6.x i386/x86_64 (20161108)	Nessus	Scientific Linux Local Security Checks	2016/11/9	2026/1/19	medium
93823	openSUSE Security Update : libgcrypt (openSUSE-2016-1138)	Nessus	SuSE Local Security Checks	2016/10/3	2026/1/22	medium
111862	Photon OS 1.0: Cracklib / Glibc / Httpd / Libevent / Libgcrypt PHSA-2017-0013 (deprecated)	Nessus	PhotonOS Local Security Checks	2018/8/17	2019/2/7	critical
93019	Debian DSA-3650-1 : libgcrypt20 - security update	Nessus	Debian Local Security Checks	2016/8/18	2026/1/28	medium
93023	FreeBSD : gnupg -- attacker who obtains 4640 bits from the RNG can trivially predict the next 160 bits of output (e1c71d8d-64d9-11e6-b38a-25a46b33f2ed)	Nessus	FreeBSD Local Security Checks	2016/8/18	2026/1/28	medium
93080	Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / 14.2 / current : gnupg (SSA:2016-236-01)	Nessus	Slackware Local Security Checks	2016/8/24	2026/1/28	medium
93536	Amazon Linux AMI : libgcrypt / gnupg (ALAS-2016-744)	Nessus	Amazon Linux Local Security Checks	2016/9/16	2026/1/23	medium
94650	OracleVM 3.3 / 3.4 : libgcrypt (OVMSA-2016-0156)	Nessus	OracleVM Local Security Checks	2016/11/9	2026/1/19	medium

检测

插件搜索

medium

medium

medium

medium

medium

medium

medium

medium

critical

medium

medium

medium

medium

medium