USN-8711-1: Libgcrypt vulnerability
It was discovered that Libgcrypt had a timing-based side-channel flaw in its RSA implementation. A remote attacker could possibly use this issue to obtain sensitive information.
CSIRTS triage
- What
- Libgcrypt contains a timing-based side-channel flaw in its RSA implementation that could leak sensitive information.
- Who is affected
- Systems using Libgcrypt for RSA cryptographic operations are affected.
- Urgency
- Medium urgency due to information disclosure through side-channel analysis.
- Action
- Update Libgcrypt to the version addressing CVE-2024-2236.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch Libgcrypt
Get an email when a new Libgcrypt advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://ubuntu.com/security/notices/USN-8711-1
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Moderate exploitation riskCVE-2024-22361.1% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 64% of all EPSS-scored CVEs.
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2024-2236 | coverage & exploitation status | NVD · CVE.org |
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
More from Ubuntu Security Notices
- unknownUSN-8770-1: SimpleSAMLphp vulnerabilities2026-09-15
- unknownUSN-8769-1: phpseclib vulnerability2026-09-15
- unknownUSN-8768-1: Shibboleth vulnerability2026-09-15
- unknownUSN-8767-1: Snapcast vulnerability2026-09-15
- unknownUSN-8766-1: Suricata-Update vulnerability2026-09-15