Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The mixing functions in the random number generator in Libgcrypt before 1.5.6, 1.6.x before 1.6.6, and 1.7.x before 1.7.3 and GnuPG before 1.4.21 make it easier for attackers to obtain the values of 160 bits by leveraging knowledge of the previous 4640 bits.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
GNU Libgcrypt和GnuPG 可预测随机数生成漏洞
Vulnerability Description
GNU Libgcrypt和GnuPG（GNU Privacy Guard）都是GNU计划开发的基于GnuPG代码的通用加密库。该库实现了各种加密算法，包括对称密码、哈希算法、公开密钥算法等。 GNU Libgcrypt 1.6.3-2+deb8u2之前的版本和GnuPG 1.4.18-7+deb8u2之前的版本中的‘mixing’函数存在可预测随机数生成漏洞。攻击者可利用该漏洞从RNG获得4640 bit数据后，可以轻易预测接下来的160 bit数据。
CVSS Information
N/A
Vulnerability Type
N/A