Timing side-channel in ECDSA signature computation

🗓️ 20 Jan 2025 00:00:00Reported by OpenSSLType

Timing side-channel in OpenSSL FIPS 3.0-3.4 ECDSA signature computation can leak private key.

Reporter	Title	Published	Views	Family All 311
IBM Security Bulletins	Security Bulletin: Security vulnerabilities affect multiple packages shipped with IBM CICS TX Advanced.	28 Apr 202510:33	–	ibm
IBM Security Bulletins	Security Bulletin: Vulerability in IBM Spectrum Symphony with OpenSSL	13 Apr 202621:46	–	ibm
IBM Security Bulletins	Security Bulletin: AIX is vulnerable to information disclosure (CVE-2024-13176) or arbitrary code execution or a denial of service (CVE-2024-9143) due to OpenSSL	15 Apr 202503:47	–	ibm
IBM Security Bulletins	Security Bulletin: z/Transaction Processing Facility is affected by an OpenSSL vulnerability	19 Feb 202515:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DataPower Gateway affected by timing side-channel in OpenSSL (CVE-2024-13176)	11 Jun 202511:58	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in OpenSSL (CVE-2024-13176) affects PowerVM	16 May 202518:20	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Lenovo XCC affect IBM Cloud Pak System	4 Mar 202612:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM i is affected by errors in OpenSSL as part of IBM Portable Utilities for i due to multiple vulnerabilities.	24 Jul 202517:48	–	ibm
IBM Security Bulletins	Security Bulletin: This Power System update is being released to address CVE-2024-13176	10 Jun 202517:27	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in jetty affects IBM Netezza Appliance	7 May 202606:21	–	ibm

Vulners

Node

openssl opensslRange3.4.0–3.4.1

openssl opensslRange3.3.0–3.3.3

openssl opensslRange3.2.0–3.2.4

openssl opensslRange3.1.0–3.1.8

openssl opensslRange3.0.0–3.0.16

openssl opensslRange1.1.1–1.1.1zb

openssl opensslRange1.0.2–1.0.2zl

20 Jan 2025 00:00Current

CVSS 3.14.1

EPSS0.00613

SSVC