Lucene search
OracleLinuxELSA-2024-1608HistoryApr 03, 2024 - 12:00 a.m.
opencryptoki security update
2024-04-0300:00:00
linux.oracle.com
10
opencryptoki
security
update
rsa
side-channel
attack
unix
5.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
6.9 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
40.7%
[3.21.0-10]
- timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin)
Resolves: RHEL-22791
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| oracle linux | 8 | src | opencryptoki | < 3.21.0-10.el8_9 | opencryptoki-3.21.0-10.el8_9.src.rpm |
| oracle linux | 8 | src | opencryptoki | < 3.21.0-10.el8_9 | opencryptoki-3.21.0-10.el8_9.src.rpm |
| oracle linux | 8 | src | opencryptoki | < 3.21.0-10.el8_9 | opencryptoki-3.21.0-10.el8_9.src.rpm |
| oracle linux | 8 | aarch64 | opencryptoki | < 3.21.0-10.el8_9 | opencryptoki-3.21.0-10.el8_9.aarch64.rpm |
| oracle linux | 8 | aarch64 | opencryptoki | < 3.21.0-10.el8_9 | opencryptoki-3.21.0-10.el8_9.aarch64.rpm |
| oracle linux | 8 | aarch64 | opencryptoki-devel | < 3.21.0-10.el8_9 | opencryptoki-devel-3.21.0-10.el8_9.aarch64.rpm |
| oracle linux | 8 | aarch64 | opencryptoki-icsftok | < 3.21.0-10.el8_9 | opencryptoki-icsftok-3.21.0-10.el8_9.aarch64.rpm |
| oracle linux | 8 | aarch64 | opencryptoki-icsftok | < 3.21.0-10.el8_9 | opencryptoki-icsftok-3.21.0-10.el8_9.aarch64.rpm |
| oracle linux | 8 | aarch64 | opencryptoki-libs | < 3.21.0-10.el8_9 | opencryptoki-libs-3.21.0-10.el8_9.aarch64.rpm |
| oracle linux | 8 | aarch64 | opencryptoki-libs | < 3.21.0-10.el8_9 | opencryptoki-libs-3.21.0-10.el8_9.aarch64.rpm |
Related
ubuntucve
ubuntucve
CVE-2024-0914
2024-01-31 00:00:00
prion
prion
Design/Logic Flaw
2024-01-31 05:15:00
rocky
rocky
opencryptoki security update
2024-04-05 14:55:53
nessus
nessus
RHEL 7 : opencryptoki (Unpatched Vulnerability)
2024-05-11 00:00:00
AlmaLinux 8 : opencryptoki (ALSA-2024:1608)
2024-04-03 00:00:00
RHEL 6 : opencryptoki (Unpatched Vulnerability)
2024-05-11 00:00:00
redhat
redhat
(RHSA-2024:1239) Moderate: opencryptoki security update
2024-03-07 20:29:07
(RHSA-2024:1992) Moderate: opencryptoki security update
2024-04-23 13:22:21
(RHSA-2024:1411) Moderate: opencryptoki security update
2024-03-19 16:35:22
debiancve
debiancve
CVE-2024-0914
2024-01-31 05:15:08
osv
osv
Moderate: opencryptoki security update
2024-04-05 14:55:53
Moderate: opencryptoki security update
2024-03-07 00:00:00
Moderate: opencryptoki security update
2024-04-02 00:00:00
mageia
mageia
Updated opencryptoki packages fix security vulnerability
2024-04-27 09:26:16
redos
redos
ROS-20240410-23
2024-04-10 00:00:00
oraclelinux
oraclelinux
opencryptoki security update
2024-03-08 00:00:00
openvas
openvas
openSUSE: Security Advisory for openCryptoki (SUSE-SU-2024:1447-1)
2024-05-07 00:00:00
Mageia: Security Advisory (MGASA-2024-0152)
2024-04-29 00:00:00
almalinux
almalinux
Moderate: opencryptoki security update
2024-04-02 00:00:00
Moderate: opencryptoki security update
2024-03-07 00:00:00
nvd
nvd
CVE-2024-0914
2024-01-31 05:15:08
aix
aix
ibm
ibm
redhatcve
redhatcve
CVE-2024-0914
2024-01-25 22:49:32
cve
cve
CVE-2024-0914
2024-01-31 05:15:08
cvelist
cvelist
5.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
6.9 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
40.7%
Related for ELSA-2024-1608