CVE-2018-6829

cipher/elgamal.c in Libgcrypt through 1.8.2, when used to encrypt messages directly, improperly encodes plaintexts, which allows attackers to obtain sensitive information by reading ciphertext data (i.e., it does not have semantic security in face of a ciphertext-only attack). The Decisional Diffie-Hellman (DDH) assumption does not hold for Libgcrypt's ElGamal implementation.

• CWE-327

• https://github.com/weikengchen/attack-on-libgcrypt-elgamalThird Party Advisory
• https://github.com/weikengchen/attack-on-libgcrypt-elgamal/wikiExploit, Third Party Advisory
• https://lists.gnupg.org/pipermail/gcrypt-devel/2018-February/004394.htmlIssue Tracking, Third Party Advisory
• https://www.oracle.com/security-alerts/cpujan2020.html
• https://github.com/weikengchen/attack-on-libgcrypt-elgamalThird Party Advisory
• https://github.com/weikengchen/attack-on-libgcrypt-elgamal/wikiExploit, Third Party Advisory
• https://lists.gnupg.org/pipermail/gcrypt-devel/2018-February/004394.htmlIssue Tracking, Third Party Advisory
• https://www.oracle.com/security-alerts/cpujan2020.html

Published

Feb 7, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-6822In PureVPN 6.0.1 on macOS, HelperTool LaunchDaemon implement…
• CVE-2018-6823In the VPN client in Mailbutler Shimo before 4.1.5.1 on macO…
• CVE-2018-6824Cozy version 2 has XSS allowing remote attackers to obtain a…
• CVE-2018-6825An issue was discovered on VOBOT CLOCK before 0.99.30 device…
• CVE-2018-6826An issue was discovered on VOBOT CLOCK before 0.99.30 device…
• CVE-2018-6827VOBOT CLOCK before 0.99.30 devices do not verify X.509 certi…
• CVE-2018-6830Directory traversal vulnerability in Foscam Cameras C1 Lite …
• CVE-2018-6831The setSystemTime function in Foscam Cameras C1 Lite V3, and…
• CVE-2018-6832Stack-based buffer overflow in the getSWFlag function in Fos…
• CVE-2018-6834static/js/pad_utils.js in Etherpad Lite before v1.6.3 has XS…
• CVE-2018-6835node/hooks/express/apicalls.js in Etherpad Lite before v1.6.…
• CVE-2018-6836The netmonrec_comment_destroy function in wiretap/netmon.c i…