CVE-2021-3345
Fixed in a distro release EPSS 1%
_gcry_md_block_write in cipher/hash-common.c in Libgcrypt version 1.9.0 has a heap-based buffer overflow when the digest final function sets a large count value. It is recommended to upgrade to 1.9.1 or later.
Products: gnupg libgcrypt, oracle communications_billing_and_revenue_management
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Arch Linux | libgcrypt | 1.9.1-1 |
| openSUSE Tumbleweed | libgcrypt | 1.9.4-1.2 |