CVE:CVE-2018-0495
CNNVD:CNNVD-201806-819
Libgcrypt是GNU计划开发的一个基于GnuPG代码的通用加密库。该库实现了各种加密算法，包括对称密码、哈希算法、公开密钥算法等。
Libgcrypt 1.7.10之前版本和1.8.3之前的1.8.x版本中存在安全漏洞。攻击者可通过访问本地设备或同一物理主机上的其他虚拟设备利用该漏洞实施边信道攻击，获取ECDSA密钥。
solution:Upgrade gnupg libgcrypt to a higher version than 1.7.10,1.8.3,and avoid the version (,1.7.10),[1.8.0,1.8.3); Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,16.04,17.10,18.04,18.10,and avoid the version 12.04,14.04,16.04,17.10,18.04,18.10; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade redhat ansible_tower to a higher version than 3.3,and avoid the version 3.3; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0; Upgrade oracle traffic_director to a higher version than 11.1.1.9.0,and avoid the version 11.1.1.9.0