CVE-2024-13176 Timing side-channel in ECDSA signature computation

🗓️ 20 Jan 2025 13:29:57Reported by GoogleType

osv

osv🔗 osv.dev👁 19 Views

Timing side-channel in ECDSA may allow private key recovery; severity is low.

Reporter	Title	Published	Views	Family All 298
IBM Security Bulletins	Security Bulletin: Security vulnerabilities affect multiple packages shipped with IBM CICS TX Advanced.	28 Apr 202510:33	–	ibm
IBM Security Bulletins	Security Bulletin: Vulerability in IBM Spectrum Symphony with OpenSSL	13 Apr 202621:46	–	ibm
IBM Security Bulletins	Security Bulletin: AIX is vulnerable to information disclosure (CVE-2024-13176) or arbitrary code execution or a denial of service (CVE-2024-9143) due to OpenSSL	15 Apr 202503:47	–	ibm
IBM Security Bulletins	Security Bulletin: z/Transaction Processing Facility is affected by an OpenSSL vulnerability	19 Feb 202515:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DataPower Gateway affected by timing side-channel in OpenSSL (CVE-2024-13176)	11 Jun 202511:58	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in OpenSSL (CVE-2024-13176) affects PowerVM	16 May 202518:20	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Lenovo XCC affect IBM Cloud Pak System	4 Mar 202612:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM i is affected by errors in OpenSSL as part of IBM Portable Utilities for i due to multiple vulnerabilities.	24 Jul 202517:48	–	ibm
IBM Security Bulletins	Security Bulletin: This Power System update is being released to address CVE-2024-13176	10 Jun 202517:27	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in jetty affects IBM Netezza Appliance	7 May 202606:21	–	ibm

Source	Link
openwall	www.openwall.com/lists/oss-security/2025/01/20/2
lists	www.lists.debian.org/debian-lts-announce/2025/05/msg00028.html
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2024/13xxx/CVE-2024-13176.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-13176
openssl-library	www.openssl-library.org/news/secadv/20250120.txt
security	www.security.netapp.com/advisory/ntap-20250124-0005/
security	www.security.netapp.com/advisory/ntap-20250418-0010/
security	www.security.netapp.com/advisory/ntap-20250502-0006/
github	www.github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844
github	www.github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467

15 Jul 2026 15:53Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.14.1

EPSS0.00601

timing side-channel ecdsa signature private key recovery nist p-521 curve low severity