Lucene search
OracleLinuxELSA-2024-1239HistoryMar 08, 2024 - 12:00 a.m.
opencryptoki security update
2024-03-0800:00:00
linux.oracle.com
8
opencryptoki security update timing side-channel rsa pkcs1 v1.5 marvin rhel-22792 unix
5.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
7.3 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
40.7%
[3.21.0-9]
- timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin)
Resolves: RHEL-22792
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| oracle linux | 9 | src | opencryptoki | < 3.21.0-9.el9_3 | opencryptoki-3.21.0-9.el9_3.src.rpm |
| oracle linux | 9 | src | opencryptoki | < 3.21.0-9.el9_3 | opencryptoki-3.21.0-9.el9_3.src.rpm |
| oracle linux | 9 | aarch64 | opencryptoki | < 3.21.0-9.el9_3 | opencryptoki-3.21.0-9.el9_3.aarch64.rpm |
| oracle linux | 9 | aarch64 | opencryptoki-devel | < 3.21.0-9.el9_3 | opencryptoki-devel-3.21.0-9.el9_3.aarch64.rpm |
| oracle linux | 9 | aarch64 | opencryptoki-icsftok | < 3.21.0-9.el9_3 | opencryptoki-icsftok-3.21.0-9.el9_3.aarch64.rpm |
| oracle linux | 9 | aarch64 | opencryptoki-libs | < 3.21.0-9.el9_3 | opencryptoki-libs-3.21.0-9.el9_3.aarch64.rpm |
| oracle linux | 9 | aarch64 | opencryptoki-swtok | < 3.21.0-9.el9_3 | opencryptoki-swtok-3.21.0-9.el9_3.aarch64.rpm |
| oracle linux | 9 | src | opencryptoki | < 3.21.0-9.el9_3 | opencryptoki-3.21.0-9.el9_3.src.rpm |
| oracle linux | 9 | src | opencryptoki | < 3.21.0-9.el9_3 | opencryptoki-3.21.0-9.el9_3.src.rpm |
| oracle linux | 9 | x86_64 | opencryptoki | < 3.21.0-9.el9_3 | opencryptoki-3.21.0-9.el9_3.x86_64.rpm |
Related
ubuntucve
ubuntucve
CVE-2024-0914
2024-01-31 00:00:00
prion
prion
Design/Logic Flaw
2024-01-31 05:15:00
rocky
rocky
opencryptoki security update
2024-04-05 14:55:53
nessus
nessus
RHEL 7 : opencryptoki (Unpatched Vulnerability)
2024-05-11 00:00:00
RHEL 6 : opencryptoki (Unpatched Vulnerability)
2024-05-11 00:00:00
AlmaLinux 8 : opencryptoki (ALSA-2024:1608)
2024-04-03 00:00:00
redhat
redhat
(RHSA-2024:1239) Moderate: opencryptoki security update
2024-03-07 20:29:07
(RHSA-2024:1992) Moderate: opencryptoki security update
2024-04-23 13:22:21
(RHSA-2024:1608) Moderate: opencryptoki security update
2024-04-02 14:57:02
debiancve
debiancve
CVE-2024-0914
2024-01-31 05:15:08
osv
osv
Moderate: opencryptoki security update
2024-04-05 14:55:53
Moderate: opencryptoki security update
2024-04-02 00:00:00
Moderate: opencryptoki security update
2024-03-07 00:00:00
mageia
mageia
Updated opencryptoki packages fix security vulnerability
2024-04-27 09:26:16
redos
redos
ROS-20240410-23
2024-04-10 00:00:00
openvas
openvas
openSUSE: Security Advisory for openCryptoki (SUSE-SU-2024:1447-1)
2024-05-07 00:00:00
Mageia: Security Advisory (MGASA-2024-0152)
2024-04-29 00:00:00
almalinux
almalinux
Moderate: opencryptoki security update
2024-04-02 00:00:00
Moderate: opencryptoki security update
2024-03-07 00:00:00
cve
cve
CVE-2024-0914
2024-01-31 05:15:08
cvelist
cvelist
nvd
nvd
CVE-2024-0914
2024-01-31 05:15:08
aix
aix
ibm
ibm
oraclelinux
oraclelinux
opencryptoki security update
2024-04-03 00:00:00
redhatcve
redhatcve
CVE-2024-0914
2024-01-25 22:49:32
5.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
7.3 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
40.7%
Related for ELSA-2024-1239