CVE-2024-2236

EUVD-2024-27192
A timing-based side-channel flaw was found in libgcrypt's RSA implementation. This issue may allow a remote attacker to initiate a Bleichenbacher-style attack, which can lead to the decryption of RSA ciphertexts.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.9 MEDIUM
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 66.01%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP
V3.1.0 ≤
𝑥
< V3.1.5
ADP
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP
V3.1.0 ≤
𝑥
< V3.1.5
ADP
SiemensSIPLUS S7-1500 CPU 1518-4 PN/DP MFP
V3.1.0 ≤
𝑥
< V3.1.5
ADP
Debian logo
Debian Releases
Debian Product
Codename
libgcrypt20
bookworm
unimportant
bullseye
unimportant
forky
unimportant
sid
unimportant
trixie
unimportant
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
libgcrypt11
focal
dne
jammy
dne
mantic
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
resolute
dne
trusty
needed
libgcrypt20
bionic
needed
focal
needed
jammy
Fixed 1.9.4-3ubuntu3.3
released
mantic
ignored
noble
Fixed 1.10.3-2ubuntu0.2
released
oracular
ignored
plucky
ignored
questing
ignored
resolute
Fixed 1.12.0-2ubuntu1.1
released
xenial
needed
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
libgcrypt-cavs
suse enterprise sap 15 SP5
1.9.4-150500.12.3.3
fixed
suse enterprise server 15 SP5
1.9.4-150500.12.3.3
fixed
libgcrypt-devel
suse enterprise desktop 15 SP6
1.10.3-150600.3.9.1
fixed
suse enterprise desktop 15 SP7
1.11.0-150700.5.7.1
fixed
suse enterprise sap 12 SP5
1.6.1-16.86.1
fixed
suse enterprise sap 15 SP3
1.8.2-150100.8.45.1
fixed
suse enterprise sap 15 SP4
1.9.4-150400.6.11.1
fixed
suse enterprise sap 15 SP5
1.9.4-150500.12.3.3
fixed
suse enterprise sap 15 SP6
1.10.3-150600.3.9.1
fixed
suse enterprise sap 15 SP7
1.11.0-150700.5.7.1
fixed
suse enterprise server 12 SP5
1.6.1-16.86.1
fixed
suse enterprise server 15 SP2
1.8.2-150100.8.45.1
fixed
suse enterprise server 15 SP3
1.8.2-150100.8.45.1
fixed
suse enterprise server 15 SP4
1.9.4-150400.6.11.1
fixed
suse enterprise server 15 SP5
1.9.4-150500.12.3.3
fixed
suse enterprise server 15 SP6
1.10.3-150600.3.9.1
fixed
suse enterprise server 15 SP7
1.11.0-150700.5.7.1
fixed
libgcrypt-devel-32bit
suse enterprise sap 15 SP3
1.8.2-150100.8.45.1
fixed
suse enterprise server 15 SP3
1.8.2-150100.8.45.1
fixed
libgcrypt20
suse enterprise desktop 15 SP6
1.10.3-150600.3.9.1
fixed
suse enterprise desktop 15 SP7
1.11.0-150700.5.7.1
fixed
suse enterprise sap 12 SP5
1.6.1-16.86.1
fixed
suse enterprise sap 15 SP3
1.8.2-150100.8.45.1
fixed
suse enterprise sap 15 SP4
1.9.4-150400.6.11.1
fixed
suse enterprise sap 15 SP5
1.9.4-150500.12.3.3
fixed
suse enterprise sap 15 SP6
1.10.3-150600.3.9.1
fixed
suse enterprise sap 15 SP7
1.11.0-150700.5.7.1
fixed
suse enterprise server 12 SP3
1.6.1-16.86.1
fixed
suse enterprise server 12 SP5
1.6.1-16.86.1
fixed
suse enterprise server 15 SP2
1.8.2-150100.8.45.1
fixed
suse enterprise server 15 SP3
1.8.2-150100.8.45.1
fixed
suse enterprise server 15 SP4
1.9.4-150400.6.11.1
fixed
suse enterprise server 15 SP5
1.9.4-150500.12.3.3
fixed
suse enterprise server 15 SP6
1.10.3-150600.3.9.1
fixed
suse enterprise server 15 SP7
1.11.0-150700.5.7.1
fixed
libgcrypt20-32bit
suse enterprise desktop 15 SP6
1.10.3-150600.3.9.1
fixed
suse enterprise desktop 15 SP7
1.11.0-150700.5.7.1
fixed
suse enterprise sap 12 SP5
1.6.1-16.86.1
fixed
suse enterprise sap 15 SP3
1.8.2-150100.8.45.1
fixed
suse enterprise sap 15 SP4
1.9.4-150400.6.11.1
fixed
suse enterprise sap 15 SP5
1.9.4-150500.12.3.3
fixed
suse enterprise sap 15 SP6
1.10.3-150600.3.9.1
fixed
suse enterprise sap 15 SP7
1.11.0-150700.5.7.1
fixed
suse enterprise server 12 SP3
1.6.1-16.86.1
fixed
suse enterprise server 12 SP5
1.6.1-16.86.1
fixed
suse enterprise server 15 SP2
1.8.2-150100.8.45.1
fixed
suse enterprise server 15 SP3
1.8.2-150100.8.45.1
fixed
suse enterprise server 15 SP4
1.9.4-150400.6.11.1
fixed
suse enterprise server 15 SP5
1.9.4-150500.12.3.3
fixed
suse enterprise server 15 SP6
1.10.3-150600.3.9.1
fixed
suse enterprise server 15 SP7
1.11.0-150700.5.7.1
fixed
libgcrypt20-hmac
suse enterprise sap 12 SP5
1.6.1-16.86.1
fixed
suse enterprise sap 15 SP3
1.8.2-150100.8.45.1
fixed
suse enterprise sap 15 SP4
1.9.4-150400.6.11.1
fixed
suse enterprise sap 15 SP5
1.9.4-150500.12.3.3
fixed
suse enterprise server 12 SP3
1.6.1-16.86.1
fixed
suse enterprise server 12 SP5
1.6.1-16.86.1
fixed
suse enterprise server 15 SP2
1.8.2-150100.8.45.1
fixed
suse enterprise server 15 SP3
1.8.2-150100.8.45.1
fixed
suse enterprise server 15 SP4
1.9.4-150400.6.11.1
fixed
suse enterprise server 15 SP5
1.9.4-150500.12.3.3
fixed
libgcrypt20-hmac-32bit
suse enterprise sap 12 SP5
1.6.1-16.86.1
fixed
suse enterprise sap 15 SP3
1.8.2-150100.8.45.1
fixed
suse enterprise sap 15 SP4
1.9.4-150400.6.11.1
fixed
suse enterprise sap 15 SP5
1.9.4-150500.12.3.3
fixed
suse enterprise server 12 SP3
1.6.1-16.86.1
fixed
suse enterprise server 12 SP5
1.6.1-16.86.1
fixed
suse enterprise server 15 SP2
1.8.2-150100.8.45.1
fixed
suse enterprise server 15 SP3
1.8.2-150100.8.45.1
fixed
suse enterprise server 15 SP4
1.9.4-150400.6.11.1
fixed
suse enterprise server 15 SP5
1.9.4-150500.12.3.3
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
libgcrypt
RHEL 9
0:1.10.0-11.el9
fixed
libgcrypt-devel
RHEL 9
0:1.10.0-11.el9
fixed
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
libgcrypt
Amazon Linux 2023
0:1.10.2-1.amzn2023.0.2
fixed
libgcrypt-debuginfo
Amazon Linux 2023
0:1.10.2-1.amzn2023.0.2
fixed
libgcrypt-debugsource
Amazon Linux 2023
0:1.10.2-1.amzn2023.0.2
fixed
libgcrypt-devel
Amazon Linux 2023
0:1.10.2-1.amzn2023.0.2
fixed
libgcrypt-devel-debuginfo
Amazon Linux 2023
0:1.10.2-1.amzn2023.0.2
fixed
Common Weakness Enumeration
References
https://access.redhat.com/errata/RHSA-2024:9404
https://access.redhat.com/errata/RHSA-2025:3530
https://access.redhat.com/errata/RHSA-2025:3534
https://access.redhat.com/security/cve/CVE-2024-2236
https://bugzilla.redhat.com/show_bug.cgi?id=2245218
https://access.redhat.com/security/cve/CVE-2024-2236
https://bugzilla.redhat.com/show_bug.cgi?id=2245218
https://bugzilla.redhat.com/show_bug.cgi?id=2268268
https://cert-portal.siemens.com/productcert/html/ssa-398330.html