RedHat libgcrypt CVE-2016-6313 Information Disclosure Vulnerability

Description

The libgcrypt library provides general-purpose implementations of various cryptographic algorithms. Security Fix(es): * A design flaw was found in the libgcrypt PRNG (Pseudo-Random Number Generator). An attacker able to obtain the first 580 bytes of the PRNG output could predict the following 20 bytes. (CVE-2016-6313) Red Hat would like to thank Felix Drre and Vladimir Klebanov for reporting this issue.

Affected Applications

libgcrypt

CVE References

Other References