Summary
Felix Dörre and Vladimir Klebanov discovered that Libgcrypt incorrectly
handled mixing functions in the random number generator. An attacker able
to obtain 4640 bits from the RNG can trivially predict the next 160 bits of
output.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | libgcrypt11 | 1.5.3-2ubuntu4.4 |
| Ubuntu · 16.04 LTS 16.04:LTS | libgcrypt20 | 1.6.5-2ubuntu0.2 |
Vulnerabilities 1
-
Unscored —
The mixing functions in the random number generator in Libgcrypt before 1.5.6, 1.6.x before 1.6.6, and 1.7.x before 1.7…
References
-
report
https://ubuntu.com/security/CVE-2016-6313