NVD

Id
28074  
Name
CVE-2015-7511  
Description
Libgcrypt before 1.6.5 does not properly perform elliptic-point curve multiplication during decryption, which makes it easier for physically proximate attackers to extract ECDH keys by measuring electromagnetic emanations.  
Reject
 
CVSS Version
2  
CVSS Score
1.9  
Severity
Low  
CVSS Base Score
1.9  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2016-04-19  
Modified Date
2016-11-30  
Seq
2015-7511  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
147410 28074 CVE-2015-7511 openSUSE-SU-2016:1227  View
147411 28074 CVE-2015-7511 http://www.cs.tau.ac.IL/~tromer/ecdh/  View
147412 28074 CVE-2015-7511 DSA-3474  View
147413 28074 CVE-2015-7511 DSA-3478  View
147414 28074 CVE-2015-7511 83253  View
147415 28074 CVE-2015-7511 USN-2896-1  View
147416 28074 CVE-2015-7511 FEDORA-2016-83cd045bcc  View
147417 28074 CVE-2015-7511 [gnupg-announce] 20160209 [Announce] Libgcrypt 1.6.5 with security fix released  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11778 JVNDB-2015-007098 Libgcrypt における楕円曲線ディフィー・ヘルマン鍵を抽出される脆弱性 Libgcrypt は、復号の際に楕円点 (elliptic-point) 曲線の乗算を適切に実行しないため、楕円曲線ディフィー・ヘルマン (ECDH) 鍵を抽出される脆弱性が存在します。 CVE-2015-7511 84736 CVE-2015-7511 28074 1.9 2 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-007098.html 2015-09-29 2016-04-27 View