Skip to content
OpenAdvisories
Unscored USN-2555-1 2 CVEs

libgcrypt11, libgcrypt20 vulnerabilities

Published Apr 1, 2015 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

Daniel Genkin, Lev Pachmanov, Itamar Pipman, and Eran Tromer discovered
that Libgcrypt was susceptible to an attack via physical side channels. A
local attacker could use this attack to possibly recover private keys.
(CVE-2014-3591)

Daniel Genkin, Adi Shamir, and Eran Tromer discovered that Libgcrypt was
susceptible to an attack via physical side channels. A local attacker could
use this attack to possibly recover private keys. (CVE-2015-0837)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS libgcrypt11 1.5.3-2ubuntu4.2

Vulnerabilities 2

References

  • report
    https://ubuntu.com/security/CVE-2014-3591
  • report
    https://ubuntu.com/security/CVE-2015-0837