AZL-41702
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-41702.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-41702
- Upstream
- Published
- 2018-07-26T13:29:00Z
- Modified
- 2026-04-01T05:14:24.014228Z
- Severity
-
- 6.8 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N CVSS Calculator
- Summary
- CVE-2017-7526 affecting package grub2 for versions less than 2.06-25
- Details
-
libgcrypt before version 1.7.8 is vulnerable to a cache side-channel attack resulting into a complete break of RSA-1024 while using the left-to-right method for computing the sliding-window expansion. The same attack is believed to work on RSA-2048 with moderately more computation. This side-channel requires that attacker can run arbitrary software on the hardware where the private RSA key is used.
- References