Skip to main content
Version: latest

CVE-2018-6829

CVE Details​

CVE-2018-6829

Last Update​

10/14/24

NIST CVE Summary​

Cipher/elgamal.c in Libgcrypt through 1.8.2, when used to encrypt messages directly, improperly encodes plaintexts, which allows attackers to obtain sensitive information by reading ciphertext data (i.e., it does not have semantic security in face of a ciphertext-only attack). The Decisional Diffie-Hellman (DDH) assumption does not hold for Libgcrypt's ElGamal implementation.

Our Official Summary​

Investigation is ongoing to determine how this vulnerability affects our products.

CVE Severity​

7.5

Status​

Ongoing

Affected Products & Versions​

  • Palette Enterprise 4.5.3
  • Palette VerteX 4.5.3

Revision History​

  • 1.0 10/14/24 Initial Publication
  • 2.0 10/14/2024 Added Palette Enterprise & Palette VerteX 4.5.3 to Affected Products