ALPINE-CVE-2017-7526
- Source
- https://security.alpinelinux.org/vuln/CVE-2017-7526
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2017-7526.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/ALPINE-CVE-2017-7526
- Upstream
- Published
- 2018-07-26T13:29:00Z
- Modified
- 2025-09-25T23:56:33.499973Z
- Severity
-
- 6.8 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N CVSS Calculator
- Summary
- [none]
- Details
-
libgcrypt before version 1.7.8 is vulnerable to a cache side-channel attack resulting into a complete break of RSA-1024 while using the left-to-right method for computing the sliding-window expansion. The same attack is believed to work on RSA-2048 with moderately more computation. This side-channel requires that attacker can run arbitrary software on the hardware where the private RSA key is used.
- References