CVE-2015-7511: canonical ubuntu_linux
CVSS: 2.0v3.0LowModified
AliasesMGASA-2016-0072SUSE-SU-2016:1089-1UBUNTU-CVE-2015-7511USN-2896-1DEBIAN-CVE-2015-7511DSA-3474-1DSA-3478-1
Published 19-04-2016Last modified 06-08-2024
Vulnerability summary
CVE-2015-7511 is a low (CVSS 2.0) vulnerability in canonical ubuntu_linux. EPSS estimates a 0.43% chance of exploitation in the next 30 days, higher than 35.6% of scored vulnerabilities.
CVSS score
2.0/10
010
Low · v3.0 (NVD)EPSS score
0.43%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 1 · Related 1Timeline
- 19-04-2016PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Libgcrypt before 1.6.5 does not properly perform elliptic-point curve multiplication during decryption, which makes it easier for physically proximate attackers to extract ECDH keys by measuring electromagnetic emanations.
CVSS metrics
4 scores · 3 sources · 2 versionsLow 2.0Preferred score · NVD (NIST)
CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:NSourcesAll 3 agree
- OSV · UbuntuEcosystem advisory · calculated2.0LowCVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
- OSV · DebianEcosystem advisory · calculated2.0LowCVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Low 1.9Preferred score · NVD (NIST)
AV:L/AC:M/Au:N/C:P/I:N/A:NSourcesSingle source
EPSS trend
Probability
0.43%
Chance of exploitation in the next 30 days
Percentile
36%
Versus all other CVEs
30-day change
0.00 pp
From 0.43% on 18-09-2026
18-09-202618-10-2026
EPSS score0.43%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Suse8 products
- libgcrypt&distro=SUSE Linux Enterprise Desktop 12< 1.6.1-16.27.1
- libgcrypt&distro=SUSE Linux Enterprise Desktop 12 SP1< 1.6.1-16.27.1
- libgcrypt&distro=SUSE Linux Enterprise Server 12< 1.6.1-16.27.1
- libgcrypt&distro=SUSE Linux Enterprise Server 12 SP1< 1.6.1-16.27.1
- libgcrypt&distro=SUSE Linux Enterprise Server for SAP Applications 12< 1.6.1-16.27.1
Debian3 products
- libgcrypt11< 1.5.0-5+deb7u4
- libgcrypt20< 1.6.5-2 | < 1.6.3-2+deb8u1
- debian_linuxEOL7.0 | 8.0
Canonical1 product
- ubuntu_linuxEOL12.04 | 14.04 | 15.10
Gnupg1 product
- libgcrypt≤ 1.6.4
Mageia1 product
- libgcrypt< 1.5.4-5.2.mga5
Ubuntu1 product
- libgcrypt11< 1.5.3-2ubuntu4.3
6 vendors · 15 products
References
21 links
- lists.gnupg.org/pipermail/gnupg-announce/2016q1/000384.htmlMailing ListX Refsource MLISTVendor AdvisoryREPORT
Show all 21 references
- bugzilla.suse.com/965902REPORT