Lucene search

CVE-2024-3296

🗓️ 04 Apr 2024 14:11:15Reported by redhatType

cve🔗 web.nvd.nist.gov👁 50 Views🌐 20 Media mentions

A timing-based side-channel vulnerability in rust-openssl packag

Reporter	Title	Published	Views	Family All 7
RedhatCVE	CVE-2024-3296	4 Apr 202403:24	–	redhatcve
NVD	CVE-2024-3296	4 Apr 202414:15	–	nvd
F5 Networks	K000139508 : rust-openssl vulnerability CVE-2024-3296	3 May 202400:00	–	f5
Debian CVE	CVE-2024-3296	4 Apr 202414:15	–	debiancve
UbuntuCve	CVE-2024-3296	4 Apr 202400:00	–	ubuntucve
Vulnrichment	CVE-2024-3296 Rust-openssl: timing based side-channel can lead to a bleichenbacher style attack	4 Apr 202413:47	–	vulnrichment
Cvelist	CVE-2024-3296 Rust-openssl: timing based side-channel can lead to a bleichenbacher style attack	4 Apr 202413:47	–	cvelist

[
  {
    "versions": [
      {
        "status": "affected",
        "version": "3.2.0",
        "lessThan": "*",
        "versionType": "semver"
      }
    ],
    "packageName": "rust-openssl",
    "collectionURL": "https://github.com/sfackler/rust-openssl/",
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "389-ds:1.4/389-ds-base",
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "python3.12-cryptography",
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "389-ds-base",
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "keylime-agent-rust",
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "python3.12-cryptography",
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:9"
    ]
  }
]

Source	Link
access	www.access.redhat.com/security/cve/CVE-2024-3296
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

04 Apr 2024 14:15Current

5.4Medium risk

Vulners AI Score5.4

CVSS35.9

EPSS0.000

CWE-203