CVE-2016-6313

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2016-6313
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-6313.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2016-6313
Downstream
ALPINE (1)
BELL (1)
DEBIAN (1)
MGASA (1)
openSUSE (1)
RHSA (1)
SUSE (4)
UBUNTU (1)
Related
openSUSE (1)
SUSE (4)
Published
2016-12-13T20:59:04Z
Modified
2026-10-16T02:45:07Z
Severity
  • 5.3 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
[none]
Details

The mixing functions in the random number generator in Libgcrypt before 1.5.6, 1.6.x before 1.6.6, and 1.7.x before 1.7.3 and GnuPG before 1.4.21 make it easier for attackers to obtain the values of 160 bits by leveraging knowledge of the previous 4640 bits.

Database specific 
{
    "unresolved_ranges": [
        {
            "cpes": [
                "cpe:2.3:a:gnupg:gnupg:*:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "last_affected": "1.4.14"
                        }
                    ],
                    "source": "CPE_RANGE"
                }
            ],
            "vendor_product": "gnupg:gnupg"
        },
        {
            "cpes": [
                "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*",
                "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
                "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "introduced": "12.04"
                        },
                        {
                            "last_affected": "12.04"
                        },
                        {
                            "introduced": "14.04"
                        },
                        {
                            "last_affected": "14.04"
                        },
                        {
                            "introduced": "16.04"
                        },
                        {
                            "last_affected": "16.04"
                        }
                    ],
                    "source": "CPE_STRING"
                }
            ],
            "vendor_product": "canonical:ubuntu_linux"
        },
        {
            "cpes": [
                "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "introduced": "8.0"
                        },
                        {
                            "last_affected": "8.0"
                        }
                    ],
                    "source": "CPE_STRING"
                }
            ],
            "vendor_product": "debian:debian_linux"
        }
    ]
}
References

Affected packages

Git / git.gnupg.org/libgcrypt.git

Affected ranges

Type
GIT
Repo
git://git.gnupg.org/libgcrypt.git
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last Affected
a3eabcb6e97a88031f8fd56b7b650447cdda4206
Introduced
0ea9731e1c93a962f6266004ab0e7418c19d6277
Last Affected
be0bec7d9208b2f2d2ffce9cc2ca6154853e7e59
Database specific
Show details 
{
    "extracted_events": [
        {
            "cpe": "cpe:2.3:a:gnupg:libgcrypt:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "0"
                },
                {
                    "last_affected": "1.5.3"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:gnupg:libgcrypt:1.6.0:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "1.6.0"
                },
                {
                    "last_affected": "1.6.0"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:gnupg:libgcrypt:1.6.1:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "1.6.1"
                },
                {
                    "last_affected": "1.6.1"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:gnupg:libgcrypt:1.6.2:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "1.6.2"
                },
                {
                    "last_affected": "1.6.2"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:gnupg:libgcrypt:1.6.3:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "1.6.3"
                },
                {
                    "last_affected": "1.6.3"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:gnupg:libgcrypt:1.6.4:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "1.6.4"
                },
                {
                    "last_affected": "1.6.4"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:gnupg:libgcrypt:1.6.5:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "1.6.5"
                },
                {
                    "last_affected": "1.6.5"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:gnupg:libgcrypt:1.7.0:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "1.7.0"
                },
                {
                    "last_affected": "1.7.0"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:gnupg:libgcrypt:1.7.1:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "1.7.1"
                },
                {
                    "last_affected": "1.7.1"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:gnupg:libgcrypt:1.7.2:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "1.7.2"
                },
                {
                    "last_affected": "1.7.2"
                }
            ],
            "source": "CPE_STRING"
        }
    ]
}

Affected versions

1.*
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.7.0
1.7.1
1.7.2
Other
DEVEL-BRANCH-1-1
V-0-2-8
V0-0-0
V0-1-0
V0-2-0
V0-2-10
V0-2-15
V0-2-17
V0-2-18
V0-2-19
V0-2-6
V0-3-0
V0-3-1
V0-3-2
V0-3-3
V0-3-4
V0-3-5
V0-4-0
V0-4-1
V0-4-2
V0-4-3
V0-4-4
V0-4-5
V0-9-0
V0-9-1
V0-9-10
V0-9-11
V0-9-2
V0-9-3
V0-9-4
V0-9-5
V0-9-6
V0-9-7
V0-9-8
V0-9-9
V1-0-0
V1-0-1
V1-0-1-ePit-1
V1-0-2
V1-0-3
V1-0-4
V1-1-0
V1-1-10
V1-1-11
V1-1-12
V1-1-2
V1-1-3
V1-1-4
V1-1-42
V1-1-43
V1-1-44
V1-1-5
V1-1-6
V1-1-7
V1-1-8
V1-1-9
V1-1-90
V1-1-91
V1-1-92
V1-1-93
V1-1-94
V1-2-0
V1-2-1
ecc-integration-done
last-gpl-version
marcus-after-thread-cbs
marcus-before-thread-cbs
now-less-freedom-protected
post-nuke-of-trailing-ws
libgcrypt-1.*
libgcrypt-1.3.0
libgcrypt-1.3.1
libgcrypt-1.3.2
libgcrypt-1.4.0
libgcrypt-1.4.1
libgcrypt-1.4.1rc1
libgcrypt-1.4.2
libgcrypt-1.4.2rc1
libgcrypt-1.4.2rc2
libgcrypt-1.4.3
libgcrypt-1.4.4
libgcrypt-1.5.0
libgcrypt-1.5.0-beta1
libgcrypt-1.5.1
libgcrypt-1.5.2
libgcrypt-1.5.3
libgcrypt-1.6.0
libgcrypt-1.7.0
libgcrypt-1.7.1
libgcrypt-1.7.2

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-6313.json"

Git / github.com/gpg/libgcrypt

Affected ranges

Type
GIT
Repo
https://github.com/gpg/libgcrypt
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last Affected
a3eabcb6e97a88031f8fd56b7b650447cdda4206
Introduced
0ea9731e1c93a962f6266004ab0e7418c19d6277
Last Affected
be0bec7d9208b2f2d2ffce9cc2ca6154853e7e59
Database specific
Show details 
{
    "extracted_events": [
        {
            "cpe": "cpe:2.3:a:gnupg:libgcrypt:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "0"
                },
                {
                    "last_affected": "1.5.3"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:gnupg:libgcrypt:1.6.0:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "1.6.0"
                },
                {
                    "last_affected": "1.6.0"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:gnupg:libgcrypt:1.6.1:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "1.6.1"
                },
                {
                    "last_affected": "1.6.1"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:gnupg:libgcrypt:1.6.2:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "1.6.2"
                },
                {
                    "last_affected": "1.6.2"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:gnupg:libgcrypt:1.6.3:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "1.6.3"
                },
                {
                    "last_affected": "1.6.3"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:gnupg:libgcrypt:1.6.4:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "1.6.4"
                },
                {
                    "last_affected": "1.6.4"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:gnupg:libgcrypt:1.6.5:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "1.6.5"
                },
                {
                    "last_affected": "1.6.5"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:gnupg:libgcrypt:1.7.0:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "1.7.0"
                },
                {
                    "last_affected": "1.7.0"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:gnupg:libgcrypt:1.7.1:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "1.7.1"
                },
                {
                    "last_affected": "1.7.1"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:gnupg:libgcrypt:1.7.2:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "1.7.2"
                },
                {
                    "last_affected": "1.7.2"
                }
            ],
            "source": "CPE_STRING"
        }
    ]
}

Affected versions

1.*
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.6.5
1.7.0
1.7.1
1.7.2
Other
DEVEL-BRANCH-1-1
V-0-2-8
V0-0-0
V0-1-0
V0-2-0
V0-2-10
V0-2-15
V0-2-17
V0-2-18
V0-2-19
V0-2-6
V0-3-0
V0-3-1
V0-3-2
V0-3-3
V0-3-4
V0-3-5
V0-4-0
V0-4-1
V0-4-2
V0-4-3
V0-4-4
V0-4-5
V0-9-0
V0-9-1
V0-9-10
V0-9-11
V0-9-2
V0-9-3
V0-9-4
V0-9-5
V0-9-6
V0-9-7
V0-9-8
V0-9-9
V1-0-0
V1-0-1
V1-0-1-ePit-1
V1-0-2
V1-0-3
V1-0-4
V1-1-0
V1-1-10
V1-1-11
V1-1-12
V1-1-2
V1-1-3
V1-1-4
V1-1-42
V1-1-43
V1-1-44
V1-1-5
V1-1-6
V1-1-7
V1-1-8
V1-1-9
V1-1-90
V1-1-91
V1-1-92
V1-1-93
V1-1-94
V1-2-0
V1-2-1
ecc-integration-done
last-gpl-version
marcus-after-thread-cbs
marcus-before-thread-cbs
now-less-freedom-protected
post-nuke-of-trailing-ws
libgcrypt-1.*
libgcrypt-1.3.0
libgcrypt-1.3.1
libgcrypt-1.3.2
libgcrypt-1.4.0
libgcrypt-1.4.1
libgcrypt-1.4.1rc1
libgcrypt-1.4.2
libgcrypt-1.4.2rc1
libgcrypt-1.4.2rc2
libgcrypt-1.4.3
libgcrypt-1.4.4
libgcrypt-1.5.0
libgcrypt-1.5.0-beta1
libgcrypt-1.5.1
libgcrypt-1.5.2
libgcrypt-1.5.3
libgcrypt-1.6.0
libgcrypt-1.7.0
libgcrypt-1.7.1
libgcrypt-1.7.2

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-6313.json"