Search for packages
Package details: pkg:deb/debian/libgcrypt11@1.4.1-1
purl pkg:deb/debian/libgcrypt11@1.4.1-1
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 3.1
Vulnerabilities affecting this package (5)
Vulnerability Summary Fixed by
VCID-4s5w-7qf5-aaak
Aliases:
CVE-2015-0837
The mpi_powm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timing differences when accessing a pre-computed table during modular exponentiation, related to a "Last-Level Cache Side-Channel Attack."
1.5.0-5+deb7u4
Affected by 1 other vulnerability.
VCID-aab3-a7kh-aaah
Aliases:
CVE-2013-4242
CVE-2013-4242 GnuPG susceptible to Yarom/Falkner flush+reload cache side-channel attack
1.5.0-5+deb7u4
Affected by 1 other vulnerability.
VCID-ke9d-zyem-aaar
Aliases:
CVE-2015-7511
Libgcrypt before 1.6.5 does not properly perform elliptic-point curve multiplication during decryption, which makes it easier for physically proximate attackers to extract ECDH keys by measuring electromagnetic emanations.
1.5.0-5+deb7u4
Affected by 1 other vulnerability.
VCID-sjza-hk7v-aaag
Aliases:
CVE-2014-5270
Libgcrypt before 1.5.4, as used in GnuPG and other products, does not properly perform ciphertext normalization and ciphertext randomization, which makes it easier for physically proximate attackers to conduct key-extraction attacks by leveraging the ability to collect voltage data from exposed metal, a different vector than CVE-2013-4576.
1.5.0-5+deb7u4
Affected by 1 other vulnerability.
VCID-vx9d-bz2m-aaan
Aliases:
CVE-2014-3591
Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for Elgamal decryption, which allows physically proximate attackers to obtain the server's private key by determining factors using crafted ciphertext and the fluctuations in the electromagnetic field during multiplication.
1.5.0-5+deb7u4
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-21T09:27:55.216881+00:00 Debian Oval Importer Affected by VCID-4s5w-7qf5-aaak https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 36.1.3
2025-06-21T09:25:21.965207+00:00 Debian Oval Importer Affected by VCID-aab3-a7kh-aaah https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 36.1.3
2025-06-21T09:22:24.629477+00:00 Debian Oval Importer Affected by VCID-sjza-hk7v-aaag https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 36.1.3
2025-06-21T09:07:43.756435+00:00 Debian Oval Importer Affected by VCID-ke9d-zyem-aaar https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 36.1.3
2025-06-21T09:04:35.686625+00:00 Debian Oval Importer Affected by VCID-vx9d-bz2m-aaan https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 36.1.3
2025-06-20T19:28:48.400532+00:00 Debian Oval Importer Affected by VCID-aab3-a7kh-aaah None 36.1.3
2025-06-20T19:24:25.120981+00:00 Debian Oval Importer Affected by VCID-vx9d-bz2m-aaan None 36.1.3
2025-06-20T19:21:49.203057+00:00 Debian Oval Importer Affected by VCID-sjza-hk7v-aaag None 36.1.3
2025-06-20T19:21:33.228229+00:00 Debian Oval Importer Affected by VCID-ke9d-zyem-aaar None 36.1.3
2025-06-08T03:16:07.539035+00:00 Debian Oval Importer Affected by VCID-4s5w-7qf5-aaak https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 36.1.0
2025-06-08T03:13:24.061991+00:00 Debian Oval Importer Affected by VCID-aab3-a7kh-aaah https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 36.1.0
2025-06-08T03:10:16.456685+00:00 Debian Oval Importer Affected by VCID-sjza-hk7v-aaag https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 36.1.0
2025-06-08T02:54:56.488146+00:00 Debian Oval Importer Affected by VCID-ke9d-zyem-aaar https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 36.1.0
2025-06-08T02:51:37.990357+00:00 Debian Oval Importer Affected by VCID-vx9d-bz2m-aaan https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 36.1.0
2025-06-07T13:26:04.695336+00:00 Debian Oval Importer Affected by VCID-aab3-a7kh-aaah None 36.1.0
2025-06-07T13:22:55.505178+00:00 Debian Oval Importer Affected by VCID-vx9d-bz2m-aaan None 36.1.0
2025-06-07T13:21:23.598224+00:00 Debian Oval Importer Affected by VCID-sjza-hk7v-aaag None 36.1.0
2025-06-07T13:21:06.889265+00:00 Debian Oval Importer Affected by VCID-ke9d-zyem-aaar None 36.1.0
2025-06-03T13:25:22.528819+00:00 Debian Oval Importer Affected by VCID-aab3-a7kh-aaah None 36.1.2
2025-06-03T13:22:17.972851+00:00 Debian Oval Importer Affected by VCID-vx9d-bz2m-aaan None 36.1.2
2025-06-03T13:20:47.143342+00:00 Debian Oval Importer Affected by VCID-sjza-hk7v-aaag None 36.1.2
2025-06-03T13:20:31.263824+00:00 Debian Oval Importer Affected by VCID-ke9d-zyem-aaar None 36.1.2
2025-04-08T01:43:31.639306+00:00 Debian Oval Importer Affected by VCID-4s5w-7qf5-aaak https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 36.0.0
2025-04-08T01:40:46.844623+00:00 Debian Oval Importer Affected by VCID-aab3-a7kh-aaah https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 36.0.0
2025-04-08T01:37:37.585840+00:00 Debian Oval Importer Affected by VCID-sjza-hk7v-aaag https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 36.0.0
2025-04-08T01:22:10.234817+00:00 Debian Oval Importer Affected by VCID-ke9d-zyem-aaar https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 36.0.0
2025-04-08T01:18:53.600149+00:00 Debian Oval Importer Affected by VCID-vx9d-bz2m-aaan https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 36.0.0
2025-04-07T12:01:36.007491+00:00 Debian Oval Importer Affected by VCID-aab3-a7kh-aaah None 36.0.0
2025-04-07T11:58:26.679908+00:00 Debian Oval Importer Affected by VCID-vx9d-bz2m-aaan None 36.0.0
2025-04-07T11:56:54.586097+00:00 Debian Oval Importer Affected by VCID-sjza-hk7v-aaag None 36.0.0
2025-04-07T11:56:38.065363+00:00 Debian Oval Importer Affected by VCID-ke9d-zyem-aaar None 36.0.0
2024-10-05T11:42:58.754126+00:00 Debian Oval Importer Affected by VCID-aab3-a7kh-aaah https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 34.0.1