CVE-2015-7511: Infoleak
Libgcrypt before 1.6.5 does not properly perform elliptic-point curve multiplication during decryption, which makes it easier for physically proximate attackers to extract ECDH keys by measuring electromagnetic emanations.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-7511?
CVE-2015-7511 is classified as a medium severity vulnerability due to its potential for key extraction through electromagnetic emanations.
How do I fix CVE-2015-7511?
To mitigate CVE-2015-7511, upgrade Libgcrypt to version 1.6.5 or later, or apply relevant patches provided by your operating system vendor.
What systems are affected by CVE-2015-7511?
CVE-2015-7511 affects Libgcrypt versions prior to 1.6.5 and various Debian and Ubuntu distributions as specified in the vulnerability report.
What types of attacks does CVE-2015-7511 enable?
CVE-2015-7511 can allow physically proximate attackers to extract elliptic-curve Diffie-Hellman keys through electromagnetic leakage.
Is CVE-2015-7511 specific to any operating system?
CVE-2015-7511 specifically impacts Debian and Ubuntu operating systems that use vulnerable versions of Libgcrypt.