VDB
GCVE-VVD-MAGEIA-2018-301
GCVE-VVD-MAGEIA-2018-301
Advisory Published
When libgcrypt uses the private key to create a signature, such as for a
TLS or SSH connection, it inadvertently leaks information through memory
caches. An unprivileged attacker running on the same machine can collect
the information from a few thousand signatures and recover the value of
the private ECDSA or DSA key (CVE-2018-0495).
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | libgcrypt | 0 (affected), 1.7.10-1.mga6 (unaffected) | — |
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.