Vulnerabilities > Gnupg > Medium

DATE CVE VULNERABILITY TITLE RISK
2017-06-11 CVE-2017-9526 Information Exposure vulnerability in Gnupg Libgcrypt
In Libgcrypt before 1.7.7, an attacker who learns the EdDSA session key (from side-channel observation during the signing process) can easily recover the long-term secret key.
network
high complexity
gnupg CWE-200
5.9
2016-12-13 CVE-2016-6313 Information Exposure vulnerability in multiple products
The mixing functions in the random number generator in Libgcrypt before 1.5.6, 1.6.x before 1.6.6, and 1.7.x before 1.7.3 and GnuPG before 1.4.21 make it easier for attackers to obtain the values of 160 bits by leveraging knowledge of the previous 4640 bits.
network
low complexity
gnupg debian canonical CWE-200
5.3