CVE-2024-13176

🗓️ 20 Jan 2025 13:29:57Reported by opensslType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 789 Views

Timing side-channel in ECDSA can allow key recovery under specific access conditions.

Reporter	Title	Published	Views	Family All 297
IBM Security Bulletins	Security Bulletin: Security vulnerabilities affect multiple packages shipped with IBM CICS TX Advanced.	28 Apr 202510:33	–	ibm
IBM Security Bulletins	Security Bulletin: Vulerability in IBM Spectrum Symphony with OpenSSL	13 Apr 202621:46	–	ibm
IBM Security Bulletins	Security Bulletin: AIX is vulnerable to information disclosure (CVE-2024-13176) or arbitrary code execution or a denial of service (CVE-2024-9143) due to OpenSSL	15 Apr 202503:47	–	ibm
IBM Security Bulletins	Security Bulletin: z/Transaction Processing Facility is affected by an OpenSSL vulnerability	19 Feb 202515:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DataPower Gateway affected by timing side-channel in OpenSSL (CVE-2024-13176)	11 Jun 202511:58	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in OpenSSL (CVE-2024-13176) affects PowerVM	16 May 202518:20	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Lenovo XCC affect IBM Cloud Pak System	4 Mar 202612:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM i is affected by errors in OpenSSL as part of IBM Portable Utilities for i due to multiple vulnerabilities.	24 Jul 202517:48	–	ibm
IBM Security Bulletins	Security Bulletin: This Power System update is being released to address CVE-2024-13176	10 Jun 202517:27	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in jetty affects IBM Netezza Appliance	7 May 202606:21	–	ibm

Vulners

Node

openssl opensslRange3.4.0–3.4.1

openssl opensslRange3.3.0–3.3.3

openssl opensslRange3.2.0–3.2.4

openssl opensslRange3.1.0–3.1.8

openssl opensslRange3.0.0–3.0.16

openssl opensslRange1.1.1–1.1.1zb

openssl opensslRange1.0.2–1.0.2zl

[
  {
    "defaultStatus": "unaffected",
    "product": "OpenSSL",
    "vendor": "OpenSSL",
    "versions": [
      {
        "lessThan": "3.4.1",
        "status": "affected",
        "version": "3.4.0",
        "versionType": "semver"
      },
      {
        "lessThan": "3.3.3",
        "status": "affected",
        "version": "3.3.0",
        "versionType": "semver"
      },
      {
        "lessThan": "3.2.4",
        "status": "affected",
        "version": "3.2.0",
        "versionType": "semver"
      },
      {
        "lessThan": "3.1.8",
        "status": "affected",
        "version": "3.1.0",
        "versionType": "semver"
      },
      {
        "lessThan": "3.0.16",
        "status": "affected",
        "version": "3.0.0",
        "versionType": "semver"
      },
      {
        "lessThan": "1.1.1zb",
        "status": "affected",
        "version": "1.1.1",
        "versionType": "custom"
      },
      {
        "lessThan": "1.0.2zl",
        "status": "affected",
        "version": "1.0.2",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
github	www.github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f
github	www.github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86
github	www.github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902
github	www.github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467
github	www.github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844
openssl-library	www.openssl-library.org/news/secadv/20250120.txt
github	www.github.openssl.org/openssl/extended-releases/commit/0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded
github	www.github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65
security	www.security.netapp.com/advisory/ntap-20250418-0010/
security	www.security.netapp.com/advisory/ntap-20250502-0006/

17 Jun 2026 07:01Current

4.1Medium risk

Vulners AI Score4.1

CVSS 3.14.1

EPSS0.00613

SSVC

CWE-385