vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2019-13627

MEDIUM
6.3
CVSS Score
Published: September 25, 2019 at 02:44 PM UTC
Updated: October 14, 2026 at 07:16 AM UTC
3 products affected across 3 vendorsUbuntu LinuxLeapLIBGCRYPT20· also runs on 1 platform

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
MEDIUM6.3
Exploit prediction
EPSS 0.5%

Description

It was discovered that there was a ECDSA timing attack in the libgcrypt20 cryptographic library. Version affected: 1.8.4-5, 1.7.6-2+deb9u3, and 1.6.3-2+deb8u4. Versions fixed: 1.8.5-2 and 1.6.3-2+deb8u7.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Runs on — not affected

The affected product only carries this flaw when running on these platforms. The platforms themselves are not vulnerable.

References (13)

Vendor Advisoryx_refsource_SUSEThird Party Advisory
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00060.html
Vendor Advisoryx_refsource_SUSEThird Party Advisory
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00018.html
Mailing Listx_refsource_MLISTThird Party Advisory
Source: [email protected]
http://www.openwall.com/lists/oss-security/2019/10/02/2
x_refsource_MISCThird Party Advisory
Source: [email protected]
https://github.com/gpg/libgcrypt/releases/tag/libgcrypt-1.8.5
Mailing Listx_refsource_MLISTThird Party Advisory
Source: [email protected]
https://lists.debian.org/debian-lts-announce/2019/09/msg00024.html
Mailing Listx_refsource_MLISTThird Party Advisory
Source: [email protected]
https://lists.debian.org/debian-lts-announce/2020/01/msg00001.html
x_refsource_MISCThird Party Advisory
Source: [email protected]
https://minerva.crocs.fi.muni.cz/
x_refsource_MISCThird Party Advisory
Source: [email protected]
https://security-tracker.debian.org/tracker/CVE-2019-13627

CVSS

6.3MEDIUM[email protected]
Attack Vector
LOCAL
Complexity
HIGH
Privileges
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
NONE
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-203

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card