Fixed
Created: Sep 6, 2021
Updated: Oct 11, 2021
Resolved Date: Oct 11, 2021
Found In Version: 10.17.41.1
Severity: Standard
Applicable for: Wind River Linux LTS 17
Component/s: Userspace
The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction between two cryptographic libraries, a certain dangerous combination of the prime defined by the receiver's public key, the generator defined by the receiver's public key, and the sender's ephemeral exponents can lead to a cross-configuration attack against OpenPGP.
CREATE(Triage):(User=admin) [CVE-2021-40528|https://nvd.nist.gov/vuln/detail/CVE-2021-40528]
