CVE-2016-6313

CVE-2016-6313 describes a weakness in the random number generator's mixing functions within Libgcrypt (versions before 1.5.6, 1.6.6, and 1.7.3) and GnuPG (before 1.4.21). This flaw allows attackers to deduce 160 bits of the random number generator's state by observing 4640 bits of previous output. Rated as Medium severity (CVSS 5.3), this vulnerability has a low attack complexity and requires no user interaction, making it easily exploitable over a network. The primary impact is a potential loss of confidentiality, as cryptographic keys or other sensitive data relying on the compromised random number generator could be exposed. Currently, there is no evidence of active exploitation, nor are public exploit codes available in Metasploit, Nuclei, or ExploitDB. Despite limited community discussion and media coverage, the vulnerability has been publicly disclosed and patched by affected vendors like Canonical and Debian.