suse · CVE-2015-7511

Quick triage

Priority: medium Published: 2021-05-30 13:33:48 UTC Updated: 2026-04-18 18:11:22 UTC

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2015-7511 severity moderate: SUSE including 322 source package names (0.9.1:libgcrypt20-1.6.1-16.27.1, 1.0.0:libgcrypt20-1.6.1-16.27.1, …), 398 product×package rows across 84 product lines (Container caasp/v4/default-http-backend, Container caasp/v4/dnsmasq-nanny, … (84 product lines)): Fixed 241, Known Affected 157.

Description:

Libgcrypt before 1.6.5 does not properly perform elliptic-point curve multiplication during decryption, which makes it easier for physically proximate attackers to extract ECDH keys by measuring electromagnetic emanations.

cvelogic Threat Intelligence