CVE-2016-6313

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2016-6313
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-6313.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2016-6313
Downstream
Related
Published
2016-12-13T20:59:04.267Z
Modified
2026-05-28T04:03:18.807854720Z
Severity
  • 5.3 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
[none]
Details

The mixing functions in the random number generator in Libgcrypt before 1.5.6, 1.6.x before 1.6.6, and 1.7.x before 1.7.3 and GnuPG before 1.4.21 make it easier for attackers to obtain the values of 160 bits by leveraging knowledge of the previous 4640 bits.

Database specific 
{
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "last_affected": "1.4.14"
                }
            ],
            "cpes": [
                "cpe:2.3:a:gnupg:gnupg:*:*:*:*:*:*:*:*"
            ],
            "source": "CPE_RANGE",
            "vendor_product": "gnupg:gnupg"
        },
        {
            "extracted_events": [
                {
                    "last_affected": "12.04"
                },
                {
                    "last_affected": "14.04"
                },
                {
                    "last_affected": "16.04"
                }
            ],
            "cpes": [
                "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*",
                "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
                "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*"
            ],
            "source": "CPE_STRING",
            "vendor_product": "canonical:ubuntu_linux"
        },
        {
            "extracted_events": [
                {
                    "last_affected": "8.0"
                }
            ],
            "cpes": [
                "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*"
            ],
            "source": "CPE_STRING",
            "vendor_product": "debian:debian_linux"
        }
    ]
}
References

Affected packages

Git / git.gnupg.org/libgcrypt.git

Affected ranges

Type
GIT
Repo
git://git.gnupg.org/libgcrypt.git
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a3eabcb6e97a88031f8fd56b7b650447cdda4206
Last affected
0ea9731e1c93a962f6266004ab0e7418c19d6277
Last affected
8804b9ae40e8dd81ee46e18581da79cef7a4eaea
Last affected
b3936b691abddb835d17f279a57171d7589b9c6b
Last affected
0ff1a27a5ca2d99fc7a0f21aec093a0fdea10f8a
Last affected
72e8c2715dff99b63ef3c1541ae0dbfee4e99410
Last affected
92b33b9e3f016c83646f2e9360a403c853d48551
Last affected
795f9cb090c776658a0e3117996e3fb7e2ebd94a
Last affected
48aa6d6602564d6ba0cef10cf08f9fb0c59b3223
Last affected
be0bec7d9208b2f2d2ffce9cc2ca6154853e7e59
Database specific 
{
    "cpe": [
        "cpe:2.3:a:gnupg:libgcrypt:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:gnupg:libgcrypt:1.6.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:gnupg:libgcrypt:1.6.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:gnupg:libgcrypt:1.6.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:gnupg:libgcrypt:1.6.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:gnupg:libgcrypt:1.6.4:*:*:*:*:*:*:*",
        "cpe:2.3:a:gnupg:libgcrypt:1.6.5:*:*:*:*:*:*:*",
        "cpe:2.3:a:gnupg:libgcrypt:1.7.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:gnupg:libgcrypt:1.7.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:gnupg:libgcrypt:1.7.2:*:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.5.3"
        },
        {
            "last_affected": "1.6.0"
        },
        {
            "last_affected": "1.6.1"
        },
        {
            "last_affected": "1.6.2"
        },
        {
            "last_affected": "1.6.3"
        },
        {
            "last_affected": "1.6.4"
        },
        {
            "last_affected": "1.6.5"
        },
        {
            "last_affected": "1.7.0"
        },
        {
            "last_affected": "1.7.1"
        },
        {
            "last_affected": "1.7.2"
        }
    ],
    "source": [
        "CPE_RANGE",
        "CPE_STRING"
    ]
}

Affected versions

Other
DEVEL-BRANCH-1-1
V-0-2-8
V0-0-0
V0-1-0
V0-2-0
V0-2-10
V0-2-15
V0-2-17
V0-2-18
V0-2-19
V0-2-6
V0-3-0
V0-3-1
V0-3-2
V0-3-3
V0-3-4
V0-3-5
V0-4-0
V0-4-1
V0-4-2
V0-4-3
V0-4-4
V0-4-5
V0-9-0
V0-9-1
V0-9-10
V0-9-11
V0-9-2
V0-9-3
V0-9-4
V0-9-5
V0-9-6
V0-9-7
V0-9-8
V0-9-9
V1-0-0
V1-0-1
V1-0-1-ePit-1
V1-0-2
V1-0-3
V1-0-4
V1-1-0
V1-1-10
V1-1-11
V1-1-12
V1-1-2
V1-1-3
V1-1-4
V1-1-42
V1-1-43
V1-1-44
V1-1-5
V1-1-6
V1-1-7
V1-1-8
V1-1-9
V1-1-90
V1-1-91
V1-1-92
V1-1-93
V1-1-94
V1-2-0
V1-2-1
ecc-integration-done
last-gpl-version
marcus-after-thread-cbs
marcus-before-thread-cbs
now-less-freedom-protected
post-nuke-of-trailing-ws
libgcrypt-1.*
libgcrypt-1.3.0
libgcrypt-1.3.1
libgcrypt-1.3.2
libgcrypt-1.4.0
libgcrypt-1.4.1
libgcrypt-1.4.1rc1
libgcrypt-1.4.2
libgcrypt-1.4.2rc1
libgcrypt-1.4.2rc2
libgcrypt-1.4.3
libgcrypt-1.4.4
libgcrypt-1.5.0
libgcrypt-1.5.0-beta1
libgcrypt-1.5.1
libgcrypt-1.5.2
libgcrypt-1.5.3
libgcrypt-1.6.0
libgcrypt-1.6.1
libgcrypt-1.6.2
libgcrypt-1.6.3
libgcrypt-1.6.4
libgcrypt-1.6.5
libgcrypt-1.7.0
libgcrypt-1.7.1
libgcrypt-1.7.2

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-6313.json"

Git / github.com/gpg/libgcrypt

Affected ranges

Type
GIT
Repo
https://github.com/gpg/libgcrypt
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a3eabcb6e97a88031f8fd56b7b650447cdda4206
Last affected
0ea9731e1c93a962f6266004ab0e7418c19d6277
Last affected
8804b9ae40e8dd81ee46e18581da79cef7a4eaea
Last affected
b3936b691abddb835d17f279a57171d7589b9c6b
Last affected
0ff1a27a5ca2d99fc7a0f21aec093a0fdea10f8a
Last affected
72e8c2715dff99b63ef3c1541ae0dbfee4e99410
Last affected
92b33b9e3f016c83646f2e9360a403c853d48551
Last affected
795f9cb090c776658a0e3117996e3fb7e2ebd94a
Last affected
48aa6d6602564d6ba0cef10cf08f9fb0c59b3223
Last affected
be0bec7d9208b2f2d2ffce9cc2ca6154853e7e59
Database specific 
{
    "cpe": [
        "cpe:2.3:a:gnupg:libgcrypt:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:gnupg:libgcrypt:1.6.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:gnupg:libgcrypt:1.6.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:gnupg:libgcrypt:1.6.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:gnupg:libgcrypt:1.6.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:gnupg:libgcrypt:1.6.4:*:*:*:*:*:*:*",
        "cpe:2.3:a:gnupg:libgcrypt:1.6.5:*:*:*:*:*:*:*",
        "cpe:2.3:a:gnupg:libgcrypt:1.7.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:gnupg:libgcrypt:1.7.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:gnupg:libgcrypt:1.7.2:*:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.5.3"
        },
        {
            "last_affected": "1.6.0"
        },
        {
            "last_affected": "1.6.1"
        },
        {
            "last_affected": "1.6.2"
        },
        {
            "last_affected": "1.6.3"
        },
        {
            "last_affected": "1.6.4"
        },
        {
            "last_affected": "1.6.5"
        },
        {
            "last_affected": "1.7.0"
        },
        {
            "last_affected": "1.7.1"
        },
        {
            "last_affected": "1.7.2"
        }
    ],
    "source": [
        "CPE_RANGE",
        "CPE_STRING"
    ]
}

Affected versions

Other
DEVEL-BRANCH-1-1
V-0-2-8
V0-0-0
V0-1-0
V0-2-0
V0-2-10
V0-2-15
V0-2-17
V0-2-18
V0-2-19
V0-2-6
V0-3-0
V0-3-1
V0-3-2
V0-3-3
V0-3-4
V0-3-5
V0-4-0
V0-4-1
V0-4-2
V0-4-3
V0-4-4
V0-4-5
V0-9-0
V0-9-1
V0-9-10
V0-9-11
V0-9-2
V0-9-3
V0-9-4
V0-9-5
V0-9-6
V0-9-7
V0-9-8
V0-9-9
V1-0-0
V1-0-1
V1-0-1-ePit-1
V1-0-2
V1-0-3
V1-0-4
V1-1-0
V1-1-10
V1-1-11
V1-1-12
V1-1-2
V1-1-3
V1-1-4
V1-1-42
V1-1-43
V1-1-44
V1-1-5
V1-1-6
V1-1-7
V1-1-8
V1-1-9
V1-1-90
V1-1-91
V1-1-92
V1-1-93
V1-1-94
V1-2-0
V1-2-1
ecc-integration-done
last-gpl-version
marcus-after-thread-cbs
marcus-before-thread-cbs
now-less-freedom-protected
post-nuke-of-trailing-ws
libgcrypt-1.*
libgcrypt-1.3.0
libgcrypt-1.3.1
libgcrypt-1.3.2
libgcrypt-1.4.0
libgcrypt-1.4.1
libgcrypt-1.4.1rc1
libgcrypt-1.4.2
libgcrypt-1.4.2rc1
libgcrypt-1.4.2rc2
libgcrypt-1.4.3
libgcrypt-1.4.4
libgcrypt-1.5.0
libgcrypt-1.5.0-beta1
libgcrypt-1.5.1
libgcrypt-1.5.2
libgcrypt-1.5.3
libgcrypt-1.6.0
libgcrypt-1.6.1
libgcrypt-1.6.2
libgcrypt-1.6.3
libgcrypt-1.6.4
libgcrypt-1.6.5
libgcrypt-1.7.0
libgcrypt-1.7.1
libgcrypt-1.7.2

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-6313.json"