CVE-2017-7526: Canonical Ubuntu Linux

Medium severity, CVSS 6.8. EPSS: 3.8% chance of exploitation in the next 30 days.

libgcrypt before version 1.7.8 is vulnerable to a cache side-channel attack resulting into a complete break of RSA-1024 while using the left-to-right method for computing the sliding-window expansion. The same attack is believed to work on RSA-2048 with moderately more computation. This side-channel requires that attacker can run arbitrary software on the hardware where the private RSA key is used.

Affected products

• Canonical Ubuntu Linux: version 12.04 only; version 14.04 only; version 16.04 only
• Debian Debian Linux: version 8.0 only; version 9.0 only
• Gnupg Libgcrypt: before 1.7.8 (fixed in 1.7.8)

Published 2018-07-26. Last modified 2026-06-17.