Vulnerability Database

317,828

Total vulnerabilities in the database

CVE-2019-13627

It was discovered that there was a ECDSA timing attack in the libgcrypt20 cryptographic library. Version affected: 1.8.4-5, 1.7.6-2+deb9u3, and 1.6.3-2+deb8u4. Versions fixed: 1.8.5-2 and 1.6.3-2+deb8u7.

  • Published: Sep 25, 2019
  • Updated: Nov 9, 2025
  • CVE: CVE-2019-13627
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.3
  • AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

CVSS v2:

  • Severity: Low
  • Score: 2.6
  • AV:L/AC:H/Au:N/C:P/I:P/A:N

CWEs:

Software From Fixed in
canonical / ubuntu_linux 16.04 16.04.x
canonical / ubuntu_linux 12.04 12.04.x
canonical / ubuntu_linux 18.04 18.04.x
opensuse / leap 15.0 15.0.x
canonical / ubuntu_linux 19.04 19.04.x
canonical / ubuntu_linux 14.04 14.04.x
opensuse / leap 15.1 15.1.x
canonical / ubuntu_linux 19.10 19.10.x
libgcrypt20_project / libgcrypt20 1.6.3-2+deb8u4 1.6.3-2+deb8u4.x
libgcrypt20_project / libgcrypt20 1.7.6-2+deb9u3 1.7.6-2+deb9u3.x
libgcrypt20_project / libgcrypt20 1.8.4-5 1.8.4-5.x