In Libgcrypt 1.8.4, the C implementation of AES is vulnerable to a flush-and-reload side-channel attack because physical addresses are available to other processes. (The C implementation is used on platforms where an assembly-language implementation is unavailable.) NOTE: the vendor's position is that the issue report cannot be validated because there is no description of an attack

An update of the libgcrypt package has been released.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - libgcrypt: PRNG output is predictable (CVE-2016-6313)

  - libgcrypt: Use of left-to-right sliding window method allows full RSA key recovery (CVE-2017-7526)

  - In Libgcrypt 1.8.4, the C implementation of AES is vulnerable to a flush-and-reload side-channel attack     because physical addresses are available to other processes. (The C implementation is used on platforms     where an assembly-language implementation is unavailable.) NOTE: the vendor's position is that the issue     report cannot be validated because there is no description of an attack (CVE-2019-12904)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - libgcrypt: Use of left-to-right sliding window method allows full RSA key recovery (CVE-2017-7526)

  - Libgcrypt: physical addresses being available to other processes leads to a flush-and-reload side-channel     attack (CVE-2019-12904)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - libgcrypt: Use of left-to-right sliding window method allows full RSA key recovery (CVE-2017-7526)

  - Libgcrypt: physical addresses being available to other processes leads to a flush-and-reload side-channel     attack (CVE-2019-12904)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - Libgcrypt: physical addresses being available to other processes leads to a flush-and-reload side-channel     attack (CVE-2019-12904)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

According to the versions of the libgcrypt package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - It was discovered that there was a ECDSA timing attack     in the libgcrypt20 cryptographic library. Version     affected: 1.8.4-5, 1.7.6-2+deb9u3, and 1.6.3-2+deb8u4.
    Versions fixed: 1.8.5-2 and     1.6.3-2+deb8u7.(CVE-2019-13627)

  - In Libgcrypt 1.8.4, the C implementation of AES is     vulnerable to a flush-and-reload side-channel attack     because physical addresses are available to other     processes. (The C implementation is used on platforms     where an assembly-language implementation is     unavailable.)(CVE-2019-12904)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the libgcrypt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - In Libgcrypt 1.8.4, the C implementation of AES is     vulnerable to a flush-and-reload side-channel attack     because physical addresses are available to other     processes. (The C implementation is used on platforms     where an assembly-language implementation is     unavailable.)(CVE-2019-12904)

  - It was discovered that there was a ECDSA timing attack     in the libgcrypt20 cryptographic library. Version     affected: 1.8.4-5, 1.7.6-2+deb9u3, and     1.6.3-2+deb8u4.(CVE-2019-13627)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for libgcrypt fixes the following issues :

Security issue fixed :

CVE-2019-12904: Fixed a flush-and-reload side-channel attack in the AES implementation (bsc#1138939).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for libgcrypt fixes the following issues :

Security issues fixed :

  - CVE-2019-12904: The C implementation of AES is     vulnerable to a flush-and-reload side-channel attack     because physical addresses are available to other     processes. (The C implementation is used on platforms     where an assembly-language implementation is     unavailable.) (bsc#1138939)

Other bugfixes :

  - Don't run full FIPS self-tests from constructor     (bsc#1097073)

  - Skip all the self-tests except for binary integrity when     called from the constructor (bsc#1097073)

  - Enforce the minimal RSA keygen size in fips mode     (bsc#1125740)

  - avoid executing some tests twice.

  - Fixed a race condition in initialization.

  - Fixed env-script-interpreter in cavs_driver.pl

  - Fixed redundant fips tests in some situations causing     failure to boot in fips mode. (bsc#1097073)

This helps during booting of the system in FIPS mode with insufficient entropy.

This update was imported from the SUSE:SLE-15:Update update project.

This update for libgcrypt fixes the following issues :

Security issues fixed :

CVE-2019-12904: The C implementation of AES is vulnerable to a flush-and-reload side-channel attack because physical addresses are available to other processes. (The C implementation is used on platforms where an assembly-language implementation is unavailable.) (bsc#1138939)

Other bugfixes: Don't run full FIPS self-tests from constructor (bsc#1097073)

Skip all the self-tests except for binary integrity when called from the constructor (bsc#1097073)

Enforce the minimal RSA keygen size in fips mode (bsc#1125740)

avoid executing some tests twice.

Fixed a race condition in initialization.

Fixed env-script-interpreter in cavs_driver.pl

Fixed redundant fips tests in some situations causing failure to boot in fips mode. (bsc#1097073)

This helps during booting of the system in FIPS mode with insufficient entropy.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
203109	Photon OS 2.0: Libgcrypt PHSA-2020-2.0-0227	Nessus	PhotonOS Local Security Checks	medium
203084	Photon OS 3.0: Libgcrypt PHSA-2019-3.0-0036	Nessus	PhotonOS Local Security Checks	medium
199239	RHEL 5 : libgcrypt (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	medium
199174	RHEL 6 : libgcrypt (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	medium
199144	RHEL 7 : libgcrypt (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	medium
199133	RHEL 8 : libgcrypt (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	medium
135490	Photon OS 1.0: Libgcrypt PHSA-2020-1.0-0288	Nessus	PhotonOS Local Security Checks	medium
132839	EulerOS Virtualization for ARM 64 3.0.5.0 : libgcrypt (EulerOS-SA-2020-1085)	Nessus	Huawei Local Security Checks	medium
130816	EulerOS 2.0 SP8 : libgcrypt (EulerOS-SA-2019-2107)	Nessus	Huawei Local Security Checks	medium
127089	SUSE SLED15 / SLES15 Security Update : libgcrypt (SUSE-SU-2019:1971-1)	Nessus	SuSE Local Security Checks	medium
126976	openSUSE Security Update : libgcrypt (openSUSE-2019-1792)	Nessus	SuSE Local Security Checks	medium
126770	SUSE SLED15 / SLES15 Security Update : libgcrypt (SUSE-SU-2019:1859-1)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2019-12904

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium