CVE-2017-0379: Debian Linux

High severity, CVSS 7.5. EPSS: 3.5% chance of exploitation in the next 30 days.

Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it easier for attackers to discover a secret key, related to cipher/ecc.c and mpi/ec.c.

Affected products

• Debian Debian Linux: version 9.0 only
• Gnupg Libgcrypt: up to and including 1.8.0

Published 2017-08-29. Last modified 2026-06-17.