The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction between two cryptographic libraries, a certain dangerous combination of the prime defined by the receiver's public key, the generator defined by the receiver's public key, and the sender's ephemeral exponents can lead to a cross-configuration attack against OpenPGP.

An update of the libgcrypt package has been released.

The remote NewStart CGSL host, running version MAIN 6.06, has libgcrypt packages installed that are affected by a vulnerability:

  - The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction     between two cryptographic libraries, a certain dangerous combination of the prime defined by the     receiver's public key, the generator defined by the receiver's public key, and the sender's ephemeral     exponents can lead to a cross-configuration attack against OpenPGP. (CVE-2021-40528)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:5311 advisory.

  - The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction     between two cryptographic libraries, a certain dangerous combination of the prime defined by the     receiver's public key, the generator defined by the receiver's public key, and the sender's ephemeral     exponents can lead to a cross-configuration attack against OpenPGP. (CVE-2021-40528)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the libgcrypt package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent     blinding to address a side-channel attack against mpi_powm, and the window size is not chosen     appropriately. This, for example, affects use of ElGamal in OpenPGP. (CVE-2021-33560)

  - The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction     between two cryptographic libraries, a certain dangerous combination of the prime defined by the     receiver's public key, the generator defined by the receiver's public key, and the sender's ephemeral     exponents can lead to a cross-configuration attack against OpenPGP. (CVE-2021-40528)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-202210-13 (libgcrypt: Multiple Vulnerabilities)

  - Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent     blinding to address a side-channel attack against mpi_powm, and the window size is not chosen     appropriately. This, for example, affects use of ElGamal in OpenPGP. (CVE-2021-33560)

  - The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction     between two cryptographic libraries, a certain dangerous combination of the prime defined by the     receiver's public key, the generator defined by the receiver's public key, and the sender's ephemeral     exponents can lead to a cross-configuration attack against OpenPGP. (CVE-2021-40528)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:5311 advisory.

  - The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction     between two cryptographic libraries, a certain dangerous combination of the prime defined by the     receiver's public key, the generator defined by the receiver's public key, and the sender's ephemeral     exponents can lead to a cross-configuration attack against OpenPGP. (CVE-2021-40528)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9564 advisory.

    [ 1.8.5-7_fips]
    - Add API to provide hash calculation in RSA/DSA/ECDSA signature       operations [Orabug: 33081130]
    - Change Epoch from 1 to 10

    [1.8.5-7]
    - Fix CVE-2021-33560 (#2018525)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-5311 advisory.

    [1.8.5-7]
    - Fix CVE-2021-33560 (#2018525)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:5311 advisory.

    The libgcrypt library provides general-purpose implementations of various cryptographic algorithms.

    Security Fix(es):

    * libgcrypt: ElGamal implementation allows plaintext recovery (CVE-2021-40528)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the libgcrypt package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction     between two cryptographic libraries, a certain dangerous combination of the prime defined by the     receiver's public key, the generator defined by the receiver's public key, and the sender's ephemeral     exponents can lead to a cross-configuration attack against OpenPGP. (CVE-2021-40528)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the libgcrypt package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction     between two cryptographic libraries, a certain dangerous combination of the prime defined by the     receiver's public key, the generator defined by the receiver's public key, and the sender's ephemeral     exponents can lead to a cross-configuration attack against OpenPGP. (CVE-2021-40528)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the libgcrypt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction     between two cryptographic libraries, a certain dangerous combination of the prime defined by the     receiver's public key, the generator defined by the receiver's public key, and the sender's ephemeral     exponents can lead to a cross-configuration attack against OpenPGP. (CVE-2021-40528)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the libgcrypt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent     blinding to address a side-channel attack against mpi_powm, and the window size is not chosen     appropriately. This, for example, affects use of ElGamal in OpenPGP. (CVE-2021-33560)

  - The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction     between two cryptographic libraries, a certain dangerous combination of the prime defined by the     receiver's public key, the generator defined by the receiver's public key, and the sender's ephemeral     exponents can lead to a cross-configuration attack against OpenPGP. (CVE-2021-40528)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5080-2 advisory.

    USN-5080-1 fixed several vulnerabilities in Libgcrypt. This update provides the corresponding update for     Ubuntu 16.04 ESM.



Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5080-1 advisory.

    It was discovered that Libgcrypt incorrectly handled ElGamal encryption. An attacker could possibly use     this issue to recover sensitive information.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
203267	Photon OS 4.0: Libgcrypt PHSA-2021-4.0-0124	Nessus	PhotonOS Local Security Checks	medium
187361	NewStart CGSL MAIN 6.06 : libgcrypt Vulnerability (NS-SA-2023-0085)	Nessus	NewStart CGSL Local Security Checks	medium
184567	Rocky Linux 8 : libgcrypt (RLSA-2022:5311)	Nessus	Rocky Linux Local Security Checks	medium
170796	EulerOS Virtualization 3.0.2.2 : libgcrypt (EulerOS-SA-2023-1266)	Nessus	Huawei Local Security Checks	high
166722	GLSA-202210-13 : libgcrypt: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	high
163347	AlmaLinux 8 : libgcrypt (5311) (ALSA-2022:5311)	Nessus	Alma Linux Local Security Checks	medium
162886	Oracle Linux 8 : libgcrypt (ELSA-2022-9564)	Nessus	Oracle Linux Local Security Checks	critical
162680	Oracle Linux 8 : libgcrypt (ELSA-2022-5311)	Nessus	Oracle Linux Local Security Checks	critical
162632	RHEL 8 : libgcrypt (RHSA-2022:5311)	Nessus	Red Hat Local Security Checks	critical
159865	EulerOS Virtualization 2.10.0 : libgcrypt (EulerOS-SA-2022-1404)	Nessus	Huawei Local Security Checks	medium
159851	EulerOS Virtualization 2.10.1 : libgcrypt (EulerOS-SA-2022-1378)	Nessus	Huawei Local Security Checks	medium
158408	EulerOS 2.0 SP10 : libgcrypt (EulerOS-SA-2022-1228)	Nessus	Huawei Local Security Checks	medium
158365	EulerOS 2.0 SP10 : libgcrypt (EulerOS-SA-2022-1209)	Nessus	Huawei Local Security Checks	medium
158312	EulerOS 2.0 SP3 : libgcrypt (EulerOS-SA-2022-1173)	Nessus	Huawei Local Security Checks	medium
156416	EulerOS 2.0 SP9 : libgcrypt (EulerOS-SA-2021-2922)	Nessus	Huawei Local Security Checks	medium
156404	EulerOS 2.0 SP9 : libgcrypt (EulerOS-SA-2021-2914)	Nessus	Huawei Local Security Checks	medium
155321	Photon OS 3.0: Libgcrypt PHSA-2021-3.0-0327	Nessus	PhotonOS Local Security Checks	medium
153514	Ubuntu 16.04 ESM : Libgcrypt vulnerabilities (USN-5080-2)	Nessus	Ubuntu Local Security Checks	critical
153447	Ubuntu 18.04 LTS / 20.04 LTS : Libgcrypt vulnerabilities (USN-5080-1)	Nessus	Ubuntu Local Security Checks	critical

Detections

Analytics

CVE-2021-40528

critical

Tenable Plugins

medium

medium

medium

high

high

medium

critical

critical

critical

medium

medium

medium

medium

medium

medium

medium

medium

critical

critical