It was discovered that there was a ECDSA timing attack in... · CVE-2019-13627 · GitHub Advisory Database · GitHub

It was discovered that there was a ECDSA timing attack in...

Moderate severity Unreviewed Published May 24, 2022 to the GitHub Advisory Database • Updated Apr 4, 2024

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

It was discovered that there was a ECDSA timing attack in the libgcrypt20 cryptographic library. Version affected: 1.8.4-5, 1.7.6-2+deb9u3, and 1.6.3-2+deb8u4. Versions fixed: 1.8.5-2 and 1.6.3-2+deb8u7.

References

Published by the National Vulnerability Database

Sep 25, 2019

Published to the GitHub Advisory Database May 24, 2022

Last updated Apr 4, 2024

Severity

Moderate

6.3

/ 10

CVSS base metrics

Attack vector

Local

Attack complexity

High

Privileges required

None

User interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N