Skip to main content
Version: latest

CVE-2018-6829

CVE Details

CVE-2018-6829

Last Update

10/14/24

NIST CVE Summary

Cipher/elgamal.c in Libgcrypt through 1.8.2, when used to encrypt messages directly, improperly encodes plaintexts, which allows attackers to obtain sensitive information by reading ciphertext data (i.e., it does not have semantic security in face of a ciphertext-only attack). The Decisional Diffie-Hellman (DDH) assumption does not hold for Libgcrypt's ElGamal implementation.

Our Official Summary

Investigation is ongoing to determine how this vulnerability affects our products.

CVE Severity

7.5

Status

Ongoing

Affected Products & Versions

  • Palette Enterprise 4.5.3
  • Palette VerteX 4.5.3

Revision History

  • 1.0 10/14/24 Initial Publication
  • 2.0 10/14/2024 Added Palette Enterprise & Palette VerteX 4.5.3 to Affected Products