CVE-2024-2236

A timing-based side-channel flaw was found in libgcrypt's RSA implementation. This issue may allow a remote attacker to initiate a Bleichenbacher-style attack, which can lead to the decryption of RSA ciphertexts.

Fixed
LOW (2.7)
  • T

    Tim Bastin detected CVE-2024-2236 with a risk of 2.7

  • T

    Tim Bastin fixed CVE-2024-2236

  • T

    Tim Bastin detected CVE-2024-2236 with a risk of 2.7

  • logo

    System fixed CVE-2024-2236

  • logo

    System detected CVE-2024-2236 with a risk of 2.7

  • logo

    System fixed CVE-2024-2236

  • logo

    System detected CVE-2024-2236 with a risk of 2.7

  • logo

    System detected CVE-2024-2236 on another ref: main

  • logo

    System detected CVE-2024-2236 with a risk of 1.35

  • T

    Tim Bastin fixed CVE-2024-2236

  • logo

    System updated the risk assessment from 1.35 to 2.7

    System recalculated raw risk assessment

Reopen this vulnerability

You can reopen this vuln, if you plan to mitigate the risk now, or accepted this vuln by accident.

Last calculated at:

Affected component

Logo von deb debian/libgcrypt20

Installed version:
1.10.1-3
Fixed in:
no patch available
Copyright © 2025 L3montree GmbH and the DevGuard Contributors. All rights reserved. Version 667098114b5ef45c7830e7aa599604fa65eb818f