{"schemaVersion":3,"id":"CVE-2017-7526","aliases":["ALPINE-CVE-2017-7526","MGASA-2017-0213","MGASA-2017-0235","SUSE-SU-2017:1793-1","SUSE-SU-2017:1794-1","SUSE-SU-2017:1866-1","UBUNTU-CVE-2017-7526","USN-3733-1","DEBIAN-CVE-2017-7526","DLA-1015-1","DLA-1080-1","DSA-3901-1","DSA-3960-1"],"status":"published","duplicateOf":null,"title":null,"description":"libgcrypt before version 1.7.8 is vulnerable to a cache side-channel attack resulting into a complete break of RSA-1024 while using the left-to-right method for computing the sliding-window expansion. The same attack is believed to work on RSA-2048 with moderately more computation. This side-channel requires that attacker can run arbitrary software on the hardware where the private RSA key is used.","dates":{"published":"2018-07-26T13:00:00.000Z","modified":"2025-12-17T22:06:14.998Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":6.8,"severity":"medium","version":"3.0","versionLabel":"v3.0","source":"NVD","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.0","versionLabel":"v3.0","source":"CVE.org","score":6.1,"severity":"medium","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.0","versionLabel":"v3.0","source":"NVD","score":6.8,"severity":"medium","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":4.3,"severity":"medium","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Alpine","score":6.8,"severity":"medium","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","exploitability":5.6,"impact":6.7,"computed":true},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Ubuntu","score":6.1,"severity":"medium","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N","exploitability":4.1,"impact":6.7,"computed":true},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Debian","score":6.8,"severity":"medium","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","exploitability":5.6,"impact":6.7,"computed":true}]},"epss":{"probability":0.03835,"percentile":0.89991,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":-0.050000000000000044,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.03885},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.03885,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.03885,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.03885,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.03885,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.03885,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.03885,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.03885,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.03859,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.03885,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.03885,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.03885,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.03885,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.03885,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.03885,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.03885,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.03885,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.03835,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.03835,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.03835,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.03835,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.03835,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.03835,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.03835,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.03835,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.03835,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.03835,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.03835,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.03835,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.03835,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.03835,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.03835,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.03835,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.03835,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.03835,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.03835,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.03835,"percentile":0.89991}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.03885,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.03885,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.03859,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.03885,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.03885,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.03885,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.03885,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.03885,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.03885,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.03885,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.03885,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.03835,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.03835,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.03835,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.03835,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.03835,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.03835,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.03835,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.03835,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.03835,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.03835,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.03835,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.03835,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.03835,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.03835,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.03835,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.03835,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.03835,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.03835,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.03835,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.03835,"percentile":0.89991}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-200","name":"Exposure of Sensitive Information to an Unauthorized Actor","description":"The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/200.html"},{"id":"CWE-310","name":"Cryptographic Issues","description":"Weaknesses in this category are related to the design and implementation of data confidentiality and integrity. Frequently these deal with the use of encoding techniques, encryption libraries, and hashing algorithms. The weaknesses in this category could lead to a degradation of the quality data if they are not addressed.","type":"category","status":"Draft","abstraction":null,"likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/310.html"}],"affected":[{"vendor":"alpine","product":"gnupg1","name":"gnupg1","label":"gnupg1","ecosystem":"Alpine Linux","cpePart":null,"purl":"pkg:apk/alpine/gnupg1","purlType":"apk","versions":[{"text":"< 1.4.23-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.4.23-r0","eol":null,"hubHref":null},{"vendor":"canonical","product":"ubuntu_linux","name":"ubuntu linux","label":"ubuntu_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"12.04","noFixRecorded":false,"fixedIn":null},{"text":"14.04","noFixRecorded":false,"fixedIn":null},{"text":"16.04","noFixRecorded":false,"fixedIn":null}],"versionsText":"12.04 | 14.04 | 16.04","eol":{"isEol":true,"eolDate":"2017-04-28T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"12.04","label":"12.04 'Precise Pangolin' (LTS)","eolFrom":"2017-04-28T00:00:00.000Z","isLts":true,"isMaintained":false,"latestVersion":"12.04.5"},"product":{"name":"ubuntu","label":"Ubuntu","category":"os"}},"hubHref":"/vendor/canonical/ubuntu_linux"},{"vendor":"debian","product":"gnupg","name":"gnupg","label":"gnupg","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/gnupg","purlType":"deb","versions":[{"text":"< 1.4.18-7+deb8u4","noFixRecorded":false,"fixedIn":null},{"text":"< 1.4.12-7+deb7u9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.4.18-7+deb8u4 | < 1.4.12-7+deb7u9","eol":null,"hubHref":null},{"vendor":"debian","product":"gnupg1","name":"gnupg1","label":"gnupg1","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/gnupg1","purlType":"deb","versions":[{"text":"< 1.4.22-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.4.22-1","eol":null,"hubHref":null},{"vendor":"debian","product":"libgcrypt11","name":"libgcrypt11","label":"libgcrypt11","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/libgcrypt11","purlType":"deb","versions":[{"text":"< 1.5.0-5+deb7u6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.5.0-5+deb7u6","eol":null,"hubHref":null},{"vendor":"debian","product":"libgcrypt20","name":"libgcrypt20","label":"libgcrypt20","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/libgcrypt20","purlType":"deb","versions":[{"text":"< 1.7.8-1","noFixRecorded":false,"fixedIn":null},{"text":"< 1.6.3-2+deb8u4","noFixRecorded":false,"fixedIn":null},{"text":"< 1.7.6-2+deb9u1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.8-1 | < 1.6.3-2+deb8u4 | < 1.7.6-2+deb9u1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"gnupg","name":"gnupg","label":"gnupg","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/gnupg","purlType":"deb","versions":[{"text":"< 1.4.16-1ubuntu2.6","noFixRecorded":false,"fixedIn":null},{"text":"< 1.4.20-1ubuntu3.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.4.16-1ubuntu2.6 | < 1.4.20-1ubuntu3.3","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"libgcrypt11","name":"libgcrypt11","label":"libgcrypt11","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/libgcrypt11","purlType":"deb","versions":[{"text":"< 1.5.3-2ubuntu4.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.5.3-2ubuntu4.5","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"libgcrypt20","name":"libgcrypt20","label":"libgcrypt20","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/libgcrypt20","purlType":"deb","versions":[{"text":"< 1.6.5-2ubuntu0.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.6.5-2ubuntu0.3","eol":null,"hubHref":null},{"vendor":"debian","product":"debian_linux","name":"debian linux","label":"debian_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"8.0","noFixRecorded":false,"fixedIn":null},{"text":"9.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"8.0 | 9.0","eol":{"isEol":true,"eolDate":"2020-06-30T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"8","label":"8 (Jessie)","eolFrom":"2020-06-30T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":"8.11"},"product":{"name":"debian","label":"Debian","category":"os"}},"hubHref":"/vendor/debian/debian_linux"},{"vendor":"gnupg","product":"libgcrypt","name":"libgcrypt","label":"libgcrypt","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.7.8","noFixRecorded":false,"fixedIn":null},{"text":"< 1.7.8","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.7.8 | < 1.7.8","eol":null,"hubHref":"/vendor/gnupg/libgcrypt"},{"vendor":"mageia","product":"gnupg","name":"gnupg","label":"gnupg","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/gnupg","purlType":"rpm","versions":[{"text":"< 1.4.19-1.3.mga5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.4.19-1.3.mga5","eol":null,"hubHref":null},{"vendor":"mageia","product":"libgcrypt","name":"libgcrypt","label":"libgcrypt","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/libgcrypt","purlType":"rpm","versions":[{"text":"< 1.5.4-5.4.mga5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.5.4-5.4.mga5","eol":null,"hubHref":null},{"vendor":"mageia","product":"gnupg","name":"gnupg","label":"gnupg","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/gnupg","purlType":"rpm","versions":[{"text":"< 1.4.22-1.mga6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.4.22-1.mga6","eol":null,"hubHref":null},{"vendor":"suse","product":"compat-libgcrypt11&distro=SUSE Linux Enterprise Module for Legacy 12","name":"compat-libgcrypt11","label":"compat-libgcrypt11&distro=SUSE Linux Enterprise Module for Legacy 12","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/compat-libgcrypt11&distro=SUSE Linux Enterprise Module for Legacy 12","purlType":"rpm","versions":[{"text":"< 1.5.0-0.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.5.0-0.6.1","eol":null,"hubHref":null},{"vendor":"suse","product":"libgcrypt&distro=SUSE Linux Enterprise Desktop 12 SP2","name":"libgcrypt","label":"libgcrypt&distro=SUSE Linux Enterprise Desktop 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/libgcrypt&distro=SUSE Linux Enterprise Desktop 12 SP2","purlType":"rpm","versions":[{"text":"< 1.6.1-16.42.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.6.1-16.42.1","eol":null,"hubHref":null},{"vendor":"suse","product":"libgcrypt&distro=SUSE Linux Enterprise Server 11 SP4","name":"libgcrypt","label":"libgcrypt&distro=SUSE Linux Enterprise Server 11 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/libgcrypt&distro=SUSE Linux Enterprise Server 11 SP4","purlType":"rpm","versions":[{"text":"< 1.5.0-0.25.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.5.0-0.25.1","eol":null,"hubHref":null},{"vendor":"suse","product":"libgcrypt&distro=SUSE Linux Enterprise Server 12 SP2","name":"libgcrypt","label":"libgcrypt&distro=SUSE Linux Enterprise Server 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/libgcrypt&distro=SUSE Linux Enterprise Server 12 SP2","purlType":"rpm","versions":[{"text":"< 1.6.1-16.42.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.6.1-16.42.1","eol":null,"hubHref":null},{"vendor":"suse","product":"libgcrypt&distro=SUSE Linux Enterprise Server for Raspberry Pi 12 SP2","name":"libgcrypt","label":"libgcrypt&distro=SUSE Linux Enterprise Server for Raspberry Pi 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/libgcrypt&distro=SUSE Linux Enterprise Server for Raspberry Pi 12 SP2","purlType":"rpm","versions":[{"text":"< 1.6.1-16.42.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.6.1-16.42.1","eol":null,"hubHref":null},{"vendor":"suse","product":"libgcrypt&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4","name":"libgcrypt","label":"libgcrypt&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/libgcrypt&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4","purlType":"rpm","versions":[{"text":"< 1.5.0-0.25.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.5.0-0.25.1","eol":null,"hubHref":null},{"vendor":"suse","product":"libgcrypt&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2","name":"libgcrypt","label":"libgcrypt&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/libgcrypt&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2","purlType":"rpm","versions":[{"text":"< 1.6.1-16.42.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.6.1-16.42.1","eol":null,"hubHref":null},{"vendor":"suse","product":"libgcrypt&distro=SUSE Linux Enterprise Software Development Kit 11 SP4","name":"libgcrypt","label":"libgcrypt&distro=SUSE Linux Enterprise Software Development Kit 11 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/libgcrypt&distro=SUSE Linux Enterprise Software Development Kit 11 SP4","purlType":"rpm","versions":[{"text":"< 1.5.0-0.25.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.5.0-0.25.1","eol":null,"hubHref":null},{"vendor":"suse","product":"libgcrypt&distro=SUSE Linux Enterprise Software Development Kit 12 SP2","name":"libgcrypt","label":"libgcrypt&distro=SUSE Linux Enterprise Software Development Kit 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/libgcrypt&distro=SUSE Linux Enterprise Software Development Kit 12 SP2","purlType":"rpm","versions":[{"text":"< 1.6.1-16.42.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.6.1-16.42.1","eol":null,"hubHref":null}],"affectedCount":23,"eol":{"hasEol":true,"count":2},"references":[{"url":"https://usn.ubuntu.com/3733-1/","label":"usn.ubuntu.com/3733-1/","hostname":"usn.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7526","label":"bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7526","hostname":"bugzilla.redhat.com","tags":["X Refsource CONFIRM","Issue Tracking","Patch","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1038915","label":"www.securitytracker.com/id/1038915","hostname":"www.securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Third Party Advisory"]},{"url":"https://www.debian.org/security/2017/dsa-3960","label":"www.debian.org/security/2017/dsa-3960","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN","Third Party Advisory"]},{"url":"https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git%3Ba=commit%3Bh=78130828e9a140a9de4dafadbc844dbb64cb709a","label":"git.gnupg.org/cgi-bin/…","hostname":"git.gnupg.org","tags":["X Refsource CONFIRM"]},{"url":"https://www.debian.org/security/2017/dsa-3901","label":"www.debian.org/security/2017/dsa-3901","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN","Third Party Advisory"]},{"url":"https://usn.ubuntu.com/3733-2/","label":"usn.ubuntu.com/3733-2/","hostname":"usn.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","Third Party Advisory"]},{"url":"https://eprint.iacr.org/2017/627","label":"eprint.iacr.org/2017/627","hostname":"eprint.iacr.org","tags":["X Refsource MISC","Third Party Advisory","REPORT"]},{"url":"http://www.securityfocus.com/bid/99338","label":"www.securityfocus.com/bid/99338","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Third Party Advisory"]},{"url":"https://lists.gnupg.org/pipermail/gnupg-announce/2017q2/000408.html","label":"lists.gnupg.org/pipermail/gnupg-announce/2017q2/000408.html","hostname":"lists.gnupg.org","tags":["Mailing List","X Refsource MLIST","Vendor Advisory"]},{"url":"https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git%3Ba=commit%3Bh=e6a3dc9900433bbc8ad362a595a3837318c28fa9","label":"git.gnupg.org/cgi-bin/…","hostname":"git.gnupg.org","tags":["X Refsource CONFIRM"]},{"url":"https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git%3Ba=commit%3Bh=8725c99ffa41778f382ca97233183bcd687bb0ce","label":"git.gnupg.org/cgi-bin/…","hostname":"git.gnupg.org","tags":["X Refsource CONFIRM"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2017-7526","label":"security.alpinelinux.org/vuln/CVE-2017-7526","hostname":"security.alpinelinux.org","tags":["Advisory"]},{"url":"https://advisories.mageia.org/MGASA-2017-0213.html","label":"advisories.mageia.org/MGASA-2017-0213.html","hostname":"advisories.mageia.org","tags":["Advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=21178","label":"bugs.mageia.org/show_bug.cgi?id=21178","hostname":"bugs.mageia.org","tags":["REPORT"]},{"url":"https://www.ubuntu.com/usn/usn-3347-1/","label":"www.ubuntu.com/usn/usn-3347-1/","hostname":"www.ubuntu.com","tags":["WEB"]},{"url":"https://advisories.mageia.org/MGASA-2017-0235.html","label":"advisories.mageia.org/MGASA-2017-0235.html","hostname":"advisories.mageia.org","tags":["Advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=21204","label":"bugs.mageia.org/show_bug.cgi?id=21204","hostname":"bugs.mageia.org","tags":["REPORT"]},{"url":"http://openwall.com/lists/oss-security/2017/07/06/8","label":"openwall.com/lists/oss-security/2017/07/06/8","hostname":"openwall.com","tags":["WEB"]},{"url":"https://www.gnupg.org/","label":"www.gnupg.org","hostname":"www.gnupg.org","tags":["WEB"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171793-1/","label":"www.suse.com/support/update/announcement/2017/suse-su-20171793-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1046607","label":"bugzilla.suse.com/1046607","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7526","label":"www.suse.com/security/cve/CVE-2017-7526","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171794-1/","label":"www.suse.com/support/update/announcement/2017/suse-su-20171794-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171866-1/","label":"www.suse.com/support/update/announcement/2017/suse-su-20171866-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-7526","label":"ubuntu.com/security/CVE-2017-7526","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-3347-1","label":"ubuntu.com/security/notices/USN-3347-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3347-2","label":"ubuntu.com/security/notices/USN-3347-2","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3733-1","label":"ubuntu.com/security/notices/USN-3733-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3733-2","label":"ubuntu.com/security/notices/USN-3733-2","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7526","label":"www.cve.org/CVERecord?id=CVE-2017-7526","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://launchpad.net/bugs/1785176","label":"launchpad.net/bugs/1785176","hostname":"launchpad.net","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-7526","label":"security-tracker.debian.org/tracker/CVE-2017-7526","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7526","label":"nvd.nist.gov/vuln/detail/CVE-2017-7526","hostname":"nvd.nist.gov","tags":["Oval","Advisory"]}],"lineage":{"upstream":[],"downstream":["OPENSUSE-SU-2024:10941-1","USN-3347-1"],"duplicates":[],"related":["OPENSUSE-SU-2024:10941-1","USN-3347-1"]},"timeline":[{"kind":"published","date":"2018-07-26T13:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2025-12-17T22:06:14.998Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":28,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T01:07:42.088Z","stale":false,"partial":false}}