CVE-2021-40530
06.09.2021, 19:15
The ElGamal implementation in Crypto++ through 8.5 allows plaintext recovery because, during interaction between two cryptographic libraries, a certain dangerous combination of the prime defined by the receiver's public key, the generator defined by the receiver's public key, and the sender's ephemeral exponents can lead to a cross-configuration attack against OpenPGP.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| cryptopp | crypto\+\+ | 𝑥 ≤ 8.5 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| libcryptopp-devel |
| ||||||||||||||||||||||||
| libcryptopp8_6_0 |
|
Common Weakness Enumeration
References