Skip to main content

CVE-2021-33560

CVE Details

Visit the official vulnerability details page for CVE-2021-33560 to learn more.

Initial Publication

11/13/2024

Last Update

11/13/2024

Third Party Dependency

libgcrypt20

NIST CVE Summary

Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm, and the window size is not chosen appropriately. This, for example, affects use of ElGamal in OpenPGP.

CVE Severity

7.5

Our Official Summary

Investigation is ongoing to determine how this vulnerability affects our products.

Status

Ongoing

Affected Products & Versions

VersionPalette EnterprisePalette Enterprise AirgapVerteXVerteX Airgap
4.4.20ImpactedNo ImpactImpactedNo Impact

Revision History

DateRevision