Lucene search
+L

1197 matches found

OSV
OSV
•added 2024/03/06 10:15 p.m.•7 views

DEBIAN-CVE-2024-2236

A timing-based side-channel flaw was found in libgcrypt's RSA implementation. This issue may allow a remote attacker to initiate a Bleichenbacher-style attack, which can lead to the decryption of RSA ciphertexts...

5.9CVSS6.2AI score0.01114EPSS
SaveExploits0References1
NVD
NVD
•added 2024/03/06 10:15 p.m.•35 views

CVE-2024-2236

A timing-based side-channel flaw was found in libgcrypt's RSA implementation. This issue may allow a remote attacker to initiate a Bleichenbacher-style attack, which can lead to the decryption of RSA ciphertexts...

5.9CVSS5.6AI score0.01114EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
•added 2024/03/06 10:15 p.m.•445 views

CVE-2024-2236

A timing-based side-channel flaw was found in libgcrypt's RSA implementation. This issue may allow a remote attacker to initiate a Bleichenbacher-style attack, which can lead to the decryption of RSA ciphertexts...

5.9CVSS6.9AI score0.01114EPSS
SaveExploits0References7
Prion
Prion
•added 2024/03/06 10:15 p.m.•22 views

Information disclosure

A timing-based side-channel flaw was found in libgcrypt's RSA implementation. This issue may allow a remote attacker to initiate a Bleichenbacher-style attack, which can lead to the decryption of RSA ciphertexts...

2.6CVSS7.3AI score0.01114EPSS
SaveExploits0References2
OSV
OSV
•added 2024/03/06 10:15 p.m.•19 views

UBUNTU-CVE-2024-2236

A timing-based side-channel flaw was found in libgcrypt's RSA implementation. This issue may allow a remote attacker to initiate a Bleichenbacher-style attack, which can lead to the decryption of RSA ciphertexts...

5.9CVSS6.9AI score0.01114EPSS
SaveExploits0References8
Mend
Mend
•added 2024/03/06 10:07 p.m.•1 views

CVE-2024-2236

A timing-based side-channel flaw was found in libgcrypt's RSA implementation. This issue may allow a remote attacker to initiate a Bleichenbacher-style attack, which can lead to the decryption of RSA ciphertexts...

8.2CVSS0.01114EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2024/03/06 10:07 p.m.•142 views

CVE-2024-2236 Libgcrypt: vulnerable to marvin attack

A timing-based side-channel flaw was found in libgcrypt's RSA implementation. This issue may allow a remote attacker to initiate a Bleichenbacher-style attack, which can lead to the decryption of RSA ciphertexts...

5.9CVSS6.7AI score0.01114EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2024/03/06 10:07 p.m.•294 views

CVE-2024-2236

A timing-based side-channel flaw was found in libgcrypt's RSA implementation. This issue may allow a remote attacker to initiate a Bleichenbacher-style attack, which can lead to the decryption of RSA ciphertexts...

5.9CVSS6.6AI score0.01114EPSS
SaveExploits0
Cvelist
Cvelist
•added 2024/03/06 10:07 p.m.•616 views

CVE-2024-2236 Libgcrypt: vulnerable to marvin attack

A timing-based side-channel flaw was found in libgcrypt's RSA implementation. This issue may allow a remote attacker to initiate a Bleichenbacher-style attack, which can lead to the decryption of RSA ciphertexts...

5.9CVSS5.8AI score0.01114EPSS
SaveExploits0References5
CVE
CVE
•added 2024/03/06 10:07 p.m.•229 views

CVE-2024-2236

CVE-2024-2236 : IBM bulletin confirms a timing-based side-channel vulnerability in libgcrypt’s RSA implementation. The issue enables a Bleichenbacher-style attack that could decrypt RSA ciphertexts. Root cause: observable timing discrepancies in RSA operations. Affected component: libgcrypt’s RSA...

5.9CVSS7AI score0.01114EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2024/03/06 9:22 p.m.•23 views

CVE-2024-2236

A timing-based side-channel flaw was found in libgcrypt's RSA implementation. This issue may allow a remote attacker to initiate a Bleichenbacher-style attack, which can lead to the decryption of RSA ciphertexts...

5.9CVSS5.6AI score0.01114EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/03/06 12:00 a.m.•10 views

libgcrypt Security Vulnerabilities

Libgcrypt is a general-purpose cryptographic library based on the GnuPG code from the US GNU community. The library implements a variety of cryptographic algorithms, including symmetric ciphers, hashing algorithms, and public key algorithms. A security vulnerability exists in libgcrypt, which ste...

5.9CVSS7AI score0.01114EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2024/03/06 12:00 a.m.•9 views

PT-2024-2174

Name of the Vulnerable Software and Affected Versions libgcrypt affected versions not specified Description A timing-based side-channel flaw was found in libgcrypt's RSA implementation, which may allow a remote attacker to initiate a Bleichenbacher-style attack. This can lead to the decryption of...

5.9CVSS6.6AI score0.01114EPSS
SaveExploits0References69
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/06 12:00 a.m.•4 views

CVE-2024-2236: Covert Timing Channel

A timing-based side-channel flaw was found in libgcrypt's RSA implementation. This issue may allow a remote attacker to initiate a Bleichenbacher-style attack, which can lead to the decryption of RSA ciphertexts...

5.9CVSS5.8AI score0.01114EPSS
SaveExploits0References2
GithubExploit
GithubExploit
•added 2024/02/29 10:05 p.m.•7 views

Exploit for Out-of-bounds Write in Gnupg Libgcrypt

CVE-2021-...

7.8CVSS0.01064EPSS
SaveExploits2
Veracode
Veracode
•added 2024/01/19 9:02 a.m.•20 views

Side Channel Vulnerability

Libgcrypt is vulnerable to Side Channel Vulnerability. The vulnerability is due to improper input validation within the Curve25519 algorithm located in cipher/ecc.c and mpi/ec.c. An attacker can possibly exfiltrate the private key as a result of this side channel attack...

7.5CVSS6.5AI score0.0351EPSS
SaveExploits0References12Affected Software1
Tenable Nessus
Tenable Nessus
•added 2023/12/27 12:00 a.m.•31 views

NewStart CGSL MAIN 6.06 : libgcrypt Vulnerability (NS-SA-2023-0085)

The remote NewStart CGSL host, running version MAIN 6.06, has libgcrypt packages installed that are affected by a vulnerability: - The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction between two cryptographic libraries, a certain dangerous...

5.9CVSS6.6AI score0.01423EPSS
SaveExploits1References3
Rosalinux
Rosalinux
•added 2023/12/26 11:51 a.m.•54 views

Advisory ROSA-SA-2023-2316

Software: libgcrypt 1.8.5 OS: ROSA Virtualization 2.1 packageevrstring: libgcrypt-1.8.5-7.rv3.src.rpm CVE-ID: CVE-2021-40528 BDU-ID: 2022-00593 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the Libgcrypt cryptographic library is related to the use of a weak cryptographic algorithm. Exploitation ...

5.9CVSS6.7AI score0.01423EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2023/11/06 12:00 a.m.•58 views

Rocky Linux 8 : libgcrypt (RLSA-2022:5311)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:5311 advisory. - The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction between two cryptographic libraries, a certain...

5.9CVSS6.5AI score0.01423EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2023/11/06 12:00 a.m.•22 views

Rocky Linux 8 : libgcrypt (RLSA-2020:4482)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2020:4482 advisory. - It was discovered that there was a ECDSA timing attack in the libgcrypt20 cryptographic library. Version affected: 1.8.4-5, 1.7.6-2+deb9u3, and 1.6.3-2+deb8u4...

6.3CVSS6.7AI score0.0051EPSS
SaveExploits0References5
Rows per page
Query Builder