CVE-2024-2236

Name of the Vulnerable Software and Affected Versions libgcrypt (affected versions not specified)

Description A timing-based side-channel flaw was found in libgcrypt's RSA implementation, which may allow a remote attacker to initiate a Bleichenbacher-style attack. This can lead to the decryption of RSA ciphertexts. The issue is related to insufficient protection of service data due to timing discrepancies, potentially enabling a remote attacker to perform a Bleichenbacher or Marvin attack.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.