CVE:CVE-2021-33560
CNNVD:CNNVD-202106-573
Libgcrypt是GNU计划开发（Gnu计划开发）的一个基于GnuPG代码的通用加密库。该库实现了各种加密算法，包括对称密码、哈希算法、公开密钥算法等。
Libgcrypt 在1.8.8和1.9之前存在安全漏洞，该漏洞源于缺乏指数盲法来解决针对mpi powm的侧信道攻击，而且窗口大小选择不当。
solution:Upgrade gnupg libgcrypt to a higher version than 1.8.8,1.9.3,and avoid the version (,1.8.8),[1.9.0,1.9.3); Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0; Upgrade fedoraproject fedora to a higher version than 33,34,and avoid the version 33,34; Upgrade oracle communications_cloud_native_core_binding_support_function to a higher version than 1.11.0,and avoid the version 1.11.0; Upgrade oracle communications_cloud_native_core_network_function_cloud_native_environment to a higher version than 1.9.0,1.10.0,and avoid the version 1.9.0,1.10.0; Upgrade oracle communications_cloud_native_core_network_repository_function to a higher version than 1.14.0,1.15.0,1.15.1,and avoid the version 1.14.0,1.15.0,1.15.1; Upgrade oracle communications_cloud_native_core_network_slice_selection_function to a higher version than 1.8.0,and avoid the version 1.8.0; Upgrade oracle communications_cloud_native_core_service_communication_proxy to a higher version than 1.15.0,and avoid the version 1.15.0