CVE-2016-6313

Severity: medium (CVSS 5.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-12-13 · updated 2026-06-17
Weakness: CWE-200

Description

The mixing functions in the random number generator in Libgcrypt before 1.5.6, 1.6.x before 1.6.6, and 1.7.x before 1.7.3 and GnuPG before 1.4.21 make it easier for attackers to obtain the values of 160 bits by leveraging knowledge of the previous 4640 bits.

Affected products

Canonical Ubuntu Linux: 12.04, 14.04, 16.04
Debian Linux: 8.0
GnuPG: through 1.4.14
gnupg Libgcrypt: through 1.5.3; 1.6.0, 1.6.1, 1.6.2, 1.6.3, 1.6.4, 1.6.5 (+3)

References

http://rhn.redhat.com/errata/RHSA-2016-2674.html
http://www.debian.org/security/2016/dsa-3649
http://www.debian.org/security/2016/dsa-3650
http://www.securityfocus.com/bid/92527
http://www.securitytracker.com/id/1036635
http://www.ubuntu.com/usn/USN-3064-1
http://www.ubuntu.com/usn/USN-3065-1
https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git%3Ba=blob_plain%3Bf=NEWS
https://lists.gnupg.org/pipermail/gnupg-announce/2016q3/000395.html
https://security.gentoo.org/glsa/201610-04
https://security.gentoo.org/glsa/201612-01
http://rhn.redhat.com/errata/RHSA-2016-2674.html

Get alerted when CVE-2016-6313 or the next vulnerability affects your stack