CVE-2016-6313

—

CVSS 3.0

5.3 medium

EPSS

4%p89

Published

Dec 13, 2016 (Dec 13, 2016)

Modified

Jun 17, 2026

Description

The mixing functions in the random number generator in Libgcrypt before 1.5.6, 1.6.x before 1.6.6, and 1.7.x before 1.7.3 and GnuPG before 1.4.21 make it easier for attackers to obtain the values of 160 bits by leveraging knowledge of the previous 4640 bits.

Vendors: gnupg debian canonical
Products: libgcrypt, debian linux, ubuntu linux, gnupg
Weakness: CWE-200
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (3.6%)

In the news0 stories

No ingested article mentions this CVE yet.