Medium USN-8711-1 1 CVE

libgcrypt20 vulnerability

Published Sep 1, 2026 · Updated Sep 2, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Libgcrypt had a timing-based side-channel flaw in
its RSA implementation. A remote attacker could possibly use this issue to
obtain sensitive information.

Fixed packages 3

Release	Package	Fixed in
Ubuntu · 22.04 LTS 22.04:LTS	libgcrypt20	1.9.4-3ubuntu3.3
Ubuntu · 24.04 LTS 24.04:LTS	libgcrypt20	1.10.3-2ubuntu0.2
Ubuntu · 26.04 LTS 26.04:LTS	libgcrypt20	1.12.0-2ubuntu1.1

Vulnerabilities 1

Medium 5.9

CVE-2024-2236

Libgcrypt: vulnerable to marvin attack

A timing-based side-channel flaw was found in libgcrypt's RSA implementation. This issue may allow a remote attacker to initiate a Bleichenbacher-style attack, which can lead to the decryption of RSA ciphertexts.

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Wolfi

Mar 6, 2024

References

report
https://ubuntu.com/security/CVE-2024-2236