{
  "cveId": "CVE-2021-40528",
  "url": "https://patchblox.com/security/cve/CVE-2021-40528",
  "summary": "CVE-2021-40528 is fixed in 4 products on 1 platform, first by libgcrypt20 1.8.1-4ubuntu1.3, released September 6, 2021. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "libgcrypt20: The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintextrecovery because, during interaction between two...",
  "description": "The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintextrecovery because, during interaction between two cryptographic libraries, acertain dangerous combination of the prime defined by the receiver\u0027s publickey, the generator defined by the receiver\u0027s public key, and the sender\u0027sephemeral exponents can lead to a cross-configuration attack againstOpenPGP.",
  "published": "2021-09-06T12:15:00Z",
  "severity": "Medium",
  "cvss": 5.9,
  "cvssVector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
  "epss": 0.01423,
  "epssPercentile": 0.73036,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "libgcrypt",
      "release": "RHEL 8",
      "fixedVersion": "0:1.8.5-7.el8_6",
      "fix": "RHSA-2022:5311",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-5311",
      "released": "2022-06-30T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libgcrypt",
      "release": "almalinux 8",
      "fixedVersion": "1.8.5-7.el8_6",
      "fix": "ALSA-2022:5311",
      "url": "https://patchblox.com/security/fix/linux/alsa-2022-5311",
      "released": "2022-06-30T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libgcrypt",
      "release": "ol 8",
      "fixedVersion": "0:1.8.5-7.el8_6",
      "fix": "ELSA-2022-5311",
      "url": "https://patchblox.com/security/fix/linux/elsa-2022-5311",
      "released": "2022-07-01T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libgcrypt",
      "release": "rocky 8",
      "fixedVersion": "0:1.8.5-7.el8_6",
      "fix": "RLSA-2022:5311",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2022-5311",
      "released": "2022-06-28T10:51:57Z"
    },
    {
      "platform": "linux",
      "product": "libgcrypt-bin",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "1.8.7-5ubuntu2",
      "fix": "libgcrypt-bin 1.8.7-5ubuntu2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-libgcrypt-bin-1.8.7-5ubuntu2",
      "released": "2026-01-16T01:42:24Z"
    },
    {
      "platform": "linux",
      "product": "libgcrypt-devel",
      "release": "RHEL 8",
      "fixedVersion": "0:1.8.5-7.el8_6",
      "fix": "RHSA-2022:5311",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-5311",
      "released": "2022-06-30T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libgcrypt-devel",
      "release": "almalinux 8",
      "fixedVersion": "1.8.5-7.el8_6",
      "fix": "ALSA-2022:5311",
      "url": "https://patchblox.com/security/fix/linux/alsa-2022-5311",
      "released": "2022-06-30T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libgcrypt-devel",
      "release": "ol 8",
      "fixedVersion": "0:1.8.5-7.el8_6",
      "fix": "ELSA-2022-5311",
      "url": "https://patchblox.com/security/fix/linux/elsa-2022-5311",
      "released": "2022-07-01T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libgcrypt20",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.8.1-4ubuntu1.3",
      "fix": "libgcrypt20 1.8.1-4ubuntu1.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libgcrypt20-1.8.1-4ubuntu1.3",
      "released": "2021-09-06T12:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libgcrypt20",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "1.8.5-5ubuntu1.1",
      "fix": "libgcrypt20 1.8.5-5ubuntu1.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libgcrypt20-1.8.5-5ubuntu1.1",
      "released": "2021-09-06T12:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libgcrypt20",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1.8.7-5ubuntu2",
      "fix": "libgcrypt20 1.8.7-5ubuntu2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libgcrypt20-1.8.7-5ubuntu2",
      "released": "2021-09-06T12:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libgcrypt20",
      "release": "Ubuntu 24.10 (oracular)",
      "fixedVersion": "1.8.7-5ubuntu2",
      "fix": "libgcrypt20 1.8.7-5ubuntu2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-oracular-libgcrypt20-1.8.7-5ubuntu2",
      "released": "2026-01-16T01:42:22Z"
    },
    {
      "platform": "linux",
      "product": "libgcrypt20",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "1.8.7-5ubuntu2",
      "fix": "libgcrypt20 1.8.7-5ubuntu2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-libgcrypt20-1.8.7-5ubuntu2",
      "released": "2026-01-16T01:42:24Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}