CVE-2024-2236
Publication date 6 March 2024
Last updated 24 August 2026
Ubuntu priority
Description
A timing-based side-channel flaw was found in libgcrypt's RSA implementation. This issue may allow a remote attacker to initiate a Bleichenbacher-style attack, which can lead to the decryption of RSA ciphertexts.
Read the notes from the security team
Why is this CVE low priority?
libgcrypt developers consider this to be a low severity issue
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| libgcrypt11 | 26.04 LTS resolute | Not in release |
| 24.04 LTS noble | Not in release | |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Not in release | |
| 14.04 LTS trusty |
Vulnerable
|
|
| libgcrypt20 | 26.04 LTS resolute |
Vulnerable
|
| 24.04 LTS noble |
Vulnerable
|
|
| 22.04 LTS jammy |
Vulnerable
|
|
| 20.04 LTS focal |
Vulnerable
|
|
| 18.04 LTS bionic |
Vulnerable
|
|
| 16.04 LTS xenial |
Vulnerable
|
Notes
mdeslaur
No upstream fix for this issue as of 2026-08-24 libgcrypt developers consider this to be a low severity issue While upstream libgcrypt developers have not created a fix for this issue, Red Hat has created their own fix and it is available in Fedora.
Patch details
| Package | Patch details |
|---|---|
| libgcrypt20 |
Severity score breakdown
CVSS version: CVSS v3.0
Base score
5.9 · Medium
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
References
Other references
- https://access.redhat.com/security/cve/CVE-2024-2236
- https://lists.gnupg.org/pipermail/gcrypt-devel/2024-March/005607.html
- https://github.com/tomato42/marvin-toolkit/tree/master/example/libgcrypt
- https://dev.gnupg.org/T7136
- https://www.cve.org/CVERecord?id=CVE-2024-2236
- https://gitlab.com/redhat-crypto/libgcrypt/libgcrypt-mirror/-/merge_requests/17