ZeroDay Findings
Sign inSign up

Findings

CVE-2018-0495

Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing pr

Published Jun 13, 2018 · updated Oct 14, 2026 · gnupg libgcrypt

Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing process in the _gcry_ecc_ecdsa_sign function in cipher/ecc-ecdsa.c, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.

Timeline

Detection, updates, and resolution for this record.

  1. Jun 13, 2018 · NIST NVD

    Detected

    Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing process in the _gcry_ecc_ecdsa_sign function in cipher/ecc-ecdsa.c, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtu

  2. Oct 14, 2026 · NIST NVD

    Updated

    Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing process in the _gcry_ecc_ecdsa_sign function in cipher/ecc-ecdsa.c, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtu

  3. Oct 14, 2026 · OSV.dev

    Fix available

    libgcrypt20 fixed in 1.8.3-1; libgcrypt20 fixed in 1.8.3-1; libgcrypt20 fixed in 1.8.3-1

  4. Oct 14, 2026 · OSV.dev

    Fix available

    libgcrypt20 fixed in 1.8.3-1

  5. Oct 14, 2026 · OSV.dev

    Updated

    Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing process in the _gcry_ecc_ecdsa_sign function in cipher/ecc-ecdsa.c, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtu

Affected

  • Debian:12 libgcrypt200 → 1.8.3-1
  • Debian:13 libgcrypt200 → 1.8.3-1
  • Debian:14 libgcrypt200 → 1.8.3-1
  • cpe canonical/ubuntu linux12.04
  • cpe canonical/ubuntu linux14.04
  • cpe canonical/ubuntu linux16.04
  • cpe canonical/ubuntu linux17.10
  • cpe canonical/ubuntu linux18.04
  • cpe canonical/ubuntu linux18.10
  • cpe debian/debian linux8.0
  • cpe gnupg/libgcryptversion unspecified
  • cpe oracle/traffic director11.1.1.9.0
  • cpe redhat/ansible tower3.3

Sources

  • CVE.orgCVE-2018-0495

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2018-0495

    30-day exploitation probability 0.9%

    first.org
  • NIST NVDCVE-2018-0495

    Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing process in the _gcry_ecc_ecdsa_sign function in cipher/ecc-ecdsa.c, aka the Return Of the Hidden Numbe

    nvd.nist.gov
  • OSV.devDEBIAN-CVE-2018-0495
    osv.dev

References