Source |
The Hacker News |
Identifiant |
2277648 |
Date de publication |
2021-01-31 23:14:26 (vue: 2021-02-01 08:05:31) |
Titre |
Google Discloses Severe Bug in Libgcrypt Encryption Library-Impacting Many Projects |
Texte |
A "severe" vulnerability in GNU Privacy Guard (GnuPG)'s Libgcrypt encryption software could have allowed an attacker to write arbitrary data to the target machine, potentially leading to remote code execution.
The flaw, which affects version 1.9.0 of libgcrypt, was discovered on January 28 by Tavis Ormandy of Project Zero, a security research unit within Google dedicated to finding zero-day bugs |
Notes |
|
Envoyé |
Oui |
Condensat |
affects allowed arbitrary attacker bug bugs code data day dedicated discloses discovered encryption execution finding flaw gnu gnupg google guard have impacting january leading libgcrypt library machine many ormandy potentially privacy project projects remote research security severe software could target tavis unit version vulnerability which within write zero |
Tags |
Vulnerability
Guideline
|
Stories |
|
Move |
|
Src |
Date (GMT) |
Titre |
Description |
Tags |
Stories |
Notes |
 |
2021-02-01 14:55:16 |
(Déjà vu) Severe Bug in Libgcrypt Encryption Library (lien direct) |
The flaw was discovered on January 28th by Travis Ormandy of Project Zero, which is a security research unti within Google. It was found in GNU Privacy Guard (GnuPG)’s Libgcrypt encryption software, and potentially allowed attackers to write arbitrary data to the target machine. This is a severe vulnerability, which could lead to remote code […]
|
Guideline
|
|
★★
|