The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction between two cryptographic libraries, a certain dangerous combination of the prime defined by the receiver's public key, the generator defined by the receiver's public key, and the sender's ephemeral exponents can lead to a cross-configuration attack against OpenPGP.

The remote NewStart CGSL host, running version MAIN 6.06, has libgcrypt packages installed that are affected by a vulnerability:

  - The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction     between two cryptographic libraries, a certain dangerous combination of the prime defined by the     receiver's public key, the generator defined by the receiver's public key, and the sender's ephemeral     exponents can lead to a cross-configuration attack against OpenPGP. (CVE-2021-40528)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:5311 advisory.

  - The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction     between two cryptographic libraries, a certain dangerous combination of the prime defined by the     receiver's public key, the generator defined by the receiver's public key, and the sender's ephemeral     exponents can lead to a cross-configuration attack against OpenPGP. (CVE-2021-40528)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the libgcrypt package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent     blinding to address a side-channel attack against mpi_powm, and the window size is not chosen     appropriately. This, for example, affects use of ElGamal in OpenPGP. (CVE-2021-33560)

  - The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction     between two cryptographic libraries, a certain dangerous combination of the prime defined by the     receiver's public key, the generator defined by the receiver's public key, and the sender's ephemeral     exponents can lead to a cross-configuration attack against OpenPGP. (CVE-2021-40528)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-202210-13 (libgcrypt: Multiple Vulnerabilities)

  - Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent     blinding to address a side-channel attack against mpi_powm, and the window size is not chosen     appropriately. This, for example, affects use of ElGamal in OpenPGP. (CVE-2021-33560)

  - The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction     between two cryptographic libraries, a certain dangerous combination of the prime defined by the     receiver's public key, the generator defined by the receiver's public key, and the sender's ephemeral     exponents can lead to a cross-configuration attack against OpenPGP. (CVE-2021-40528)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:5311 advisory.

  - The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction     between two cryptographic libraries, a certain dangerous combination of the prime defined by the     receiver's public key, the generator defined by the receiver's public key, and the sender's ephemeral     exponents can lead to a cross-configuration attack against OpenPGP. (CVE-2021-40528)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9564 advisory.

  - The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction     between two cryptographic libraries, a certain dangerous combination of the prime defined by the     receiver's public key, the generator defined by the receiver's public key, and the sender's ephemeral     exponents can lead to a cross-configuration attack against OpenPGP. (CVE-2021-40528)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-5311 advisory.

  - The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction     between two cryptographic libraries, a certain dangerous combination of the prime defined by the     receiver's public key, the generator defined by the receiver's public key, and the sender's ephemeral     exponents can lead to a cross-configuration attack against OpenPGP. (CVE-2021-40528)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:5311 advisory.

  - libgcrypt: ElGamal implementation allows plaintext recovery (CVE-2021-40528)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the libgcrypt package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction     between two cryptographic libraries, a certain dangerous combination of the prime defined by the     receiver's public key, the generator defined by the receiver's public key, and the sender's ephemeral     exponents can lead to a cross-configuration attack against OpenPGP. (CVE-2021-40528)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the libgcrypt package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction     between two cryptographic libraries, a certain dangerous combination of the prime defined by the     receiver's public key, the generator defined by the receiver's public key, and the sender's ephemeral     exponents can lead to a cross-configuration attack against OpenPGP. (CVE-2021-40528)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the libgcrypt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction     between two cryptographic libraries, a certain dangerous combination of the prime defined by the     receiver's public key, the generator defined by the receiver's public key, and the sender's ephemeral     exponents can lead to a cross-configuration attack against OpenPGP. (CVE-2021-40528)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the libgcrypt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent     blinding to address a side-channel attack against mpi_powm, and the window size is not chosen     appropriately. This, for example, affects use of ElGamal in OpenPGP. (CVE-2021-33560)

  - The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction     between two cryptographic libraries, a certain dangerous combination of the prime defined by the     receiver's public key, the generator defined by the receiver's public key, and the sender's ephemeral     exponents can lead to a cross-configuration attack against OpenPGP. (CVE-2021-40528)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update of the libgcrypt package has been released.

  - The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction     between two cryptographic libraries, a certain dangerous combination of the prime defined by the     receiver's public key, the generator defined by the receiver's public key, and the sender's ephemeral     exponents can lead to a cross-configuration attack against OpenPGP. (CVE-2021-40528)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5080-2 advisory.

  - Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent     blinding to address a side-channel attack against mpi_powm, and the window size is not chosen     appropriately. This, for example, affects use of ElGamal in OpenPGP. (CVE-2021-33560)

  - The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction     between two cryptographic libraries, a certain dangerous combination of the prime defined by the     receiver's public key, the generator defined by the receiver's public key, and the sender's ephemeral     exponents can lead to a cross-configuration attack against OpenPGP. (CVE-2021-40528)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS / 20.04 LTS / 21.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5080-1 advisory.

  - Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent     blinding to address a side-channel attack against mpi_powm, and the window size is not chosen     appropriately. This, for example, affects use of ElGamal in OpenPGP. (CVE-2021-33560)

  - The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction     between two cryptographic libraries, a certain dangerous combination of the prime defined by the     receiver's public key, the generator defined by the receiver's public key, and the sender's ephemeral     exponents can lead to a cross-configuration attack against OpenPGP. (CVE-2021-40528)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
187361	NewStart CGSL MAIN 6.06 : libgcrypt Vulnerability (NS-SA-2023-0085)	Nessus	NewStart CGSL Local Security Checks	medium
184567	Rocky Linux 8 : libgcrypt (RLSA-2022:5311)	Nessus	Rocky Linux Local Security Checks	medium
170796	EulerOS Virtualization 3.0.2.2 : libgcrypt (EulerOS-SA-2023-1266)	Nessus	Huawei Local Security Checks	high
166722	GLSA-202210-13 : libgcrypt: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	high
163347	AlmaLinux 8 : libgcrypt (5311) (ALSA-2022:5311)	Nessus	Alma Linux Local Security Checks	medium
162886	Oracle Linux 8 : libgcrypt (ELSA-2022-9564)	Nessus	Oracle Linux Local Security Checks	medium
162680	Oracle Linux 8 : libgcrypt (ELSA-2022-5311)	Nessus	Oracle Linux Local Security Checks	medium
162632	RHEL 8 : libgcrypt (RHSA-2022:5311)	Nessus	Red Hat Local Security Checks	medium
159865	EulerOS Virtualization 2.10.0 : libgcrypt (EulerOS-SA-2022-1404)	Nessus	Huawei Local Security Checks	medium
159851	EulerOS Virtualization 2.10.1 : libgcrypt (EulerOS-SA-2022-1378)	Nessus	Huawei Local Security Checks	medium
158408	EulerOS 2.0 SP10 : libgcrypt (EulerOS-SA-2022-1228)	Nessus	Huawei Local Security Checks	medium
158365	EulerOS 2.0 SP10 : libgcrypt (EulerOS-SA-2022-1209)	Nessus	Huawei Local Security Checks	medium
158312	EulerOS 2.0 SP3 : libgcrypt (EulerOS-SA-2022-1173)	Nessus	Huawei Local Security Checks	medium
156416	EulerOS 2.0 SP9 : libgcrypt (EulerOS-SA-2021-2922)	Nessus	Huawei Local Security Checks	medium
156404	EulerOS 2.0 SP9 : libgcrypt (EulerOS-SA-2021-2914)	Nessus	Huawei Local Security Checks	medium
155321	Photon OS 3.0: Libgcrypt PHSA-2021-3.0-0327	Nessus	PhotonOS Local Security Checks	medium
153514	Ubuntu 16.04 ESM : Libgcrypt vulnerabilities (USN-5080-2)	Nessus	Ubuntu Local Security Checks	high
153447	Ubuntu 18.04 LTS / 20.04 LTS : Libgcrypt vulnerabilities (USN-5080-1)	Nessus	Ubuntu Local Security Checks	high

Detections

Analytics

CVE-2021-40528

medium

Tenable Plugins

medium

medium

high

high

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

high

high