CVE-2024-2236

ADVISORY - ubuntu

Summary

A timing-based side-channel flaw was found in libgcrypt's RSA implementation. This issue may allow a remote attacker to initiate a Bleichenbacher-style attack, which can lead to the decryption of RSA ciphertexts.

EPSS Score⁠: 0.00684 (0.721)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-385⁠

Covert Timing Channel

ADVISORY - redhat

CWE-208⁠

Observable Timing Discrepancy

CWE-385⁠

Covert Timing Channel

Impacted images

Advisories

Ubuntu

CREATED

2 years ago

UPDATED

5 months ago

ADVISORY IDCVE-2024-2236⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Alow

Package	Type	OS Name	OS Version	Affected Ranges	Fix Versions
ubuntu/libgcrypt20	deb	ubuntu	24.04	>=0	Not yet available
ubuntu/libgcrypt11	deb	ubuntu	14.04	>=0	Not yet available
ubuntu/libgcrypt20	deb	ubuntu	23.10	>=0	Not yet available
ubuntu/libgcrypt20	deb	ubuntu	24.10	>=0	Not yet available
ubuntu/libgcrypt20	deb	ubuntu	22.04	>=0	Not yet available
ubuntu/libgcrypt20	deb	ubuntu	20.04	>=0	Not yet available
ubuntu/libgcrypt20	deb	ubuntu	25.04	>=0	Not yet available

Severity and metrics

No CVSS data available from this advisory.

NIST

CREATED

2 years ago

UPDATED

3 months ago

ADVISORY IDCVE-2024-2236⁠

EXPLOITABILITY SCORE

2.2

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-385⁠

CVSS SCORE

5.9medium

Debian

CREATED

2 years ago

UPDATED

1 month ago

ADVISORY IDCVE-2024-2236⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Alow

Alma

CREATED

2 years ago

UPDATED

2 years ago

ADVISORY IDALSA-2024:9404⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

Amazon

CREATED

2 years ago

UPDATED

2 years ago

ADVISORY IDALAS2023-2024-736⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

Red Hat

CREATED

2 years ago

UPDATED

5 months ago

ADVISORY IDCVE-2024-2236⁠

EXPLOITABILITY SCORE

2.2

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-208⁠CWE-385⁠

CVSS SCORE

5.9medium

Rocky

CREATED

1 year ago

UPDATED

1 year ago

ADVISORY IDRLSA-2024:9404⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Alow

Oracle

CREATED

2 years ago

UPDATED

2 years ago

ADVISORY IDELSA-2024-9404⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

Chainguard

CREATED

5 months ago

UPDATED

5 months ago

ADVISORY ID

CGA-3v4g-fgjq-33xp

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY