The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:02752-1 advisory.

    - CVE-2024-2236: timing-based side-channel flaw in RSA implementation can lead to decryption of RSA     ciphertexts (bsc#1221107).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1737656427 advisory.

  - A timing-based side-channel flaw was found in libgcrypt's RSA implementation. This issue may allow a     remote attacker to initiate a Bleichenbacher-style attack, which can lead to the decryption of RSA     ciphertexts. (CVE-2024-2236)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-736 advisory.

    A timing-based side-channel flaw was found in libgcrypt's RSA implementation. This issue may allow a     remote attacker to initiate a Bleichenbacher-style attack, which can lead to the decryption of RSA     ciphertexts. (CVE-2024-2236)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:02756-1 advisory.

    - CVE-2024-2236: timing-based side-channel flaw in RSA implementation can lead to decryption of RSA     ciphertexts (bsc#1221107).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:02773-1 advisory.

    - CVE-2024-2236: timing-based side-channel flaw in RSA implementation can lead to decryption of RSA     ciphertexts (bsc#1221107).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-9141:01 advisory.

    * libgcrypt: vulnerable to Marvin Attack (CVE-2024-2236)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-2024_9404 advisory.

    * libgcrypt: vulnerable to Marvin Attack (CVE-2024-2236)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-9404 advisory.

    [1.10.0-11]
    - Fix CVE-2024-2236 (RHEL-34579)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0963 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2024-2236:
    A timing-based side-channel flaw was found in libgcrypt's RSA implementation. This issue may allow a     remote attacker to initiate a Bleichenbacher-style attack, which can lead to the decryption of RSA     ciphertexts.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:02719-1 advisory.

    - CVE-2024-2236: timing-based side-channel flaw in RSA implementation can lead to decryption of RSA     ciphertexts (bsc#1221107).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU- openSUSE-FU-2026:20562-1 advisory.

    Update libgcrypt to 1.12.1 (jsc#PED-15059):

    * New and extended interfaces:
     - Allow access to the FIPS service indicator via the new      GCRYCTL_FIPS_SERVICE_INDICATOR control code.
     - Make SHA-1 non-FIPS internally for the 1.12 API
     - Add Dilithium (ML-DSA) support
     - Support optional random-override and support byte string data

    * Bug fixes:
     - Use secure MPI in _gcry_mpi_assign_limb_space.
     - Use CSIDL_COMMON_APPDATA instead of /etc on Windows.
     - Apply a Kyber patch from upstream.
     - Fix an edge case in Jent initialization.
     - mceliece6688128f: Fix stack overflow crash on win64/wine
     * Performance:
     - Many performance improvements, new AVX512 implementations for modern CPUs.
     - Add RISC-V Zbb+Zbc implementation of CRC.
     - Add RISC-V vector cryptography implementation of GHASH, AES, SHA256 and SHA512
     - Add AVX2 and AVX512 code paths to improve CRC.

    For a full changelog, see:
    https://dev.gnupg.org/source/libgcrypt/history/master/;libgcrypt-1.12.0

    Update libgpg-error to 1.58:

     * New src/gpg-error.c (main): New command fconcat.
     * Rename src/spawn-posix.c (struct gpgrt_spawn_actions): Rename the field to      ENVP.
     * argparse: Use SYSCONFDIR for /etc.
     * Update translations for Portugese, German
     * src/estream.c (parse_mode): Fix parsing of share. Set sysopen      flag.
     * syscfg: Add 64-bit Android arch.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
249090	SUSE SLES15: libgcrypt-devel / libgcrypt-devel-32bit / libgcrypt20 / etc (SUSE-SU-2025:02752-1)	Nessus	SuSE Local Security Checks	2025/8/12	2026/6/25	medium
361253	AlmaLinux 9.2 [TuxCare] Security Update: libgcrypt / libgcrypt-devel (ALMALINUX9.2:CLSA-2025:1737656427)	Nessus	Alma Linux Local Security Checks	2026/10/1	2026/10/1	medium
208981	Amazon Linux 2023 : libgcrypt, libgcrypt-devel (ALAS2023-2024-736)	Nessus	Amazon Linux Local Security Checks	2024/10/14	2026/5/1	medium
249217	SUSE SLES12: libgcrypt-devel / libgcrypt20 / libgcrypt20-32bit / etc (SUSE-SU-2025:02756-1)	Nessus	SuSE Local Security Checks	2025/8/13	2026/6/25	medium
278712	SUSE SLES15: libgcrypt-cavs / libgcrypt-devel / libgcrypt20 / libgcrypt20-32bit / etc (SUSE-SU-2025:02773-1)	Nessus	SuSE Local Security Checks	2025/12/15	2026/6/26	medium
292330	MiracleLinux 9 : libgcrypt-1.10.0-11.el9 (AXSA:2024-9141:01)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/5/1	medium
357348	Rocky Linux 9 [CIQ] Security Update: libgcrypt / libgcrypt-debuginfo / libgcrypt-debugsource / etc (crlsa-2024_9404)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	medium
211552	Oracle Linux 9 : libgcrypt (ELSA-2024-9404)	Nessus	Oracle Linux Local Security Checks	2024/11/19	2026/5/1	medium
276235	TencentOS Server 4: libgcrypt (TSSA-2024:0963)	Nessus	Tencent Local Security Checks	2025/11/20	2026/5/1	medium
245589	SUSE SLED15 / SLES15 Security Update : libgcrypt (SUSE-SU-2025:02719-1)	Nessus	SuSE Local Security Checks	2025/8/8	2026/5/1	medium
309132	openSUSE 16 : Feature update for libgcrypt, libgpg-error (SUSE-SU-openSUSE-FU-2026:20562-1)	Nessus	SuSE Local Security Checks	2026/4/22	2026/5/1	medium

检测

插件搜索

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium