CVE-2024-13176
CVE-2024-13176 · Timing side-channel in ECDSA signature computation
Diese Seite enthält Fakten aus öffentlichen Sicherheitsquellen. Lesen Sie vor dem Aktualisieren die Originalmeldung.
Diese Seite zeigt ausgewählte Angaben aus den Quellen. Die vollständige Beschreibung und betroffene Versionen finden Sie in den verlinkten Sicherheitshinweisen.
Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation. Impact summary: A timing side-channel in ECDSA signature computations could allow recovering the private key by an attacker. However, measuring the timing would require either local access to the signing application or a very fast network connection with low latency. There is a timing signal of around 300 nanoseconds when the top word of the inverted ECDSA nonce value is zero. This can happen with significant probability only for some of the supported elliptic curves. In particular the NIST P-521 curve is affected. To be able to measure this leak, the attacker process must either be located in the same physical computer or must have a very fast network connection with low latency. For that reason the severity of this vulnerability is Low. The FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.
CVSS 4.1 · Mittel · EPSS 0,6% · Korrektur verfügbar
- Veröffentlicht
- Aktualisiert
Technologie-Stack: system · network
Betroffene Produkte und Versionen
openssl
- Softwareversionen
- ≥ 3.4.0, < 3.4.1: Betroffen (semver)
- ≥ 3.3.0, < 3.3.3: Betroffen (semver)
- ≥ 3.2.0, < 3.2.4: Betroffen (semver)
- ≥ 3.1.0, < 3.1.8: Betroffen (semver)
- ≥ 3.0.0, < 3.0.16: Betroffen (semver)
- ≥ 1.1.1, < 1.1.1zb: Betroffen (custom)
- ≥ 1.0.2, < 1.0.2zl: Betroffen (custom)
Auf 1.0.2zl aktualisieren; Auf 1.1.1zb aktualisieren; Auf 3.0.16 aktualisieren; Auf 3.1.8 aktualisieren; Auf 3.2.4 aktualisieren; Auf 3.3.3 aktualisieren; Auf 3.4.1 aktualisieren
edk2 Debian:12
- Softwareversionen
- 2022.11-6
- 2022.11-6+deb12u1
- 2022.11-6+deb12u2
- 2023.02-1
- 2023.02-2
- 2023.05-1
- 2023.05-2
- 2023.08-1
- 2023.11-1
- 2023.11-2
- 2023.11-3
- 2023.11-4
- 2023.11-5
- 2023.11-6
- 2023.11-7
- 2023.11-8
- 2024.02-1
- 2024.02-2
- 2024.05-1
- 2024.05-2
- 2024.08-1
- 2024.08-2
- 2024.08-3
- 2024.08-4
- 2024.11-1
- 2024.11-2
- 2024.11-3
- 2024.11-4
- 2024.11-5
- 2025.02-1
- 2025.02-10
- 2025.02-2
- 2025.02-3
- 2025.02-4
- 2025.02-5
- 2025.02-6
- 2025.02-7
- 2025.02-8
- 2025.02-9
- 2025.05-1
- 2025.05-2
- 2025.08.01-1
- 2025.08.01-2
- 2025.08.01-3
- 2025.08.01-4
- 2025.08.01-5
- 2025.08.01-6
- 2025.11-1
- 2025.11-2
- 2025.11-3
- 2025.11-4
- 2025.11-5
- 2026.02-1
- 2026.02-2
- 2026.02-3
- 2026.05-1
- 2026.05-2
- Betroffene Versionsbereiche
- ECOSYSTEM: (−∞, +∞)
Keine Korrektur veröffentlicht
edk2 Debian:13
- Softwareversionen
- 2025.02-8
- Betroffene Versionsbereiche
- ECOSYSTEM: < 2025.02-8+deb13u1
Auf 2025.02-8+deb13u1 aktualisieren
edk2 Debian:14
- Softwareversionen
- 2025.02-8
- Betroffene Versionsbereiche
- ECOSYSTEM: < 2025.02-9
Auf 2025.02-9 aktualisieren
openssl Debian:12
- Softwareversionen
- 3.0.10-1
- 3.0.10-1~deb12u1
- 3.0.11-1
- 3.0.11-1~deb12u1
- 3.0.11-1~deb12u2
- 3.0.12-1
- 3.0.12-2
- 3.0.13-1~deb12u1
- 3.0.13-1~deb12u2
- 3.0.14-1~deb12u1
- 3.0.14-1~deb12u2
- 3.0.15-1~deb12u1
- 3.0.9-1
- Betroffene Versionsbereiche
- ECOSYSTEM: < 3.0.16-1~deb12u1
Auf 3.0.16-1~deb12u1 aktualisieren
openssl Debian:13
- Betroffene Versionsbereiche
- ECOSYSTEM: < 3.4.1-1
Auf 3.4.1-1 aktualisieren
openssl Debian:14
- Betroffene Versionsbereiche
- ECOSYSTEM: < 3.4.1-1
Auf 3.4.1-1 aktualisieren
openssl Ubuntu:Pro:14.04:LTS
- Softwareversionen
- 1.0.1e-3ubuntu1
- 1.0.1e-4ubuntu1
- 1.0.1e-4ubuntu2
- 1.0.1e-4ubuntu3
- 1.0.1e-4ubuntu4
- 1.0.1f-1ubuntu1
- 1.0.1f-1ubuntu2
- 1.0.1f-1ubuntu2.1
- 1.0.1f-1ubuntu2.2
- 1.0.1f-1ubuntu2.3
- 1.0.1f-1ubuntu2.4
- 1.0.1f-1ubuntu2.5
- 1.0.1f-1ubuntu2.7
- 1.0.1f-1ubuntu2.8
- 1.0.1f-1ubuntu2.11
- 1.0.1f-1ubuntu2.12
- 1.0.1f-1ubuntu2.15
- 1.0.1f-1ubuntu2.16
- 1.0.1f-1ubuntu2.17
- 1.0.1f-1ubuntu2.18
- 1.0.1f-1ubuntu2.19
- 1.0.1f-1ubuntu2.20
- 1.0.1f-1ubuntu2.21
- 1.0.1f-1ubuntu2.22
- 1.0.1f-1ubuntu2.23
- 1.0.1f-1ubuntu2.24
- 1.0.1f-1ubuntu2.25
- 1.0.1f-1ubuntu2.26
- 1.0.1f-1ubuntu2.27
- 1.0.1f-1ubuntu2.27+esm1
- 1.0.1f-1ubuntu2.27+esm2
- 1.0.1f-1ubuntu2.27+esm3
- 1.0.1f-1ubuntu2.27+esm4
- 1.0.1f-1ubuntu2.27+esm5
- 1.0.1f-1ubuntu2.27+esm6
- 1.0.1f-1ubuntu2.27+esm7
- 1.0.1f-1ubuntu2.27+esm9
- 1.0.1f-1ubuntu2.27+esm10
- 1.0.1f-1ubuntu2.27+esm11
- 1.0.1f-1ubuntu2.27+esm12
- 1.0.1f-1ubuntu2.27+esm13
- 1.0.1f-1ubuntu2.27+esm14
- 1.0.1f-1ubuntu2.27+esm16
- 1.0.1f-1ubuntu2.27+esm17
- Betroffene Versionsbereiche
- ECOSYSTEM: (−∞, +∞)
Keine Korrektur veröffentlicht
openssl Ubuntu:Pro:16.04:LTS
- Softwareversionen
- 1.0.2d-0ubuntu1
- 1.0.2d-0ubuntu2
- 1.0.2e-1ubuntu1
- 1.0.2f-2ubuntu1
- 1.0.2g-1ubuntu2
- 1.0.2g-1ubuntu3
- 1.0.2g-1ubuntu4
- 1.0.2g-1ubuntu4.1
- 1.0.2g-1ubuntu4.2
- 1.0.2g-1ubuntu4.4
- 1.0.2g-1ubuntu4.5
- 1.0.2g-1ubuntu4.6
- 1.0.2g-1ubuntu4.8
- 1.0.2g-1ubuntu4.9
- 1.0.2g-1ubuntu4.10
- 1.0.2g-1ubuntu4.11
- 1.0.2g-1ubuntu4.12
- 1.0.2g-1ubuntu4.13
- 1.0.2g-1ubuntu4.14
- 1.0.2g-1ubuntu4.15
- 1.0.2g-1ubuntu4.16
- 1.0.2g-1ubuntu4.17
- 1.0.2g-1ubuntu4.18
- 1.0.2g-1ubuntu4.19
- 1.0.2g-1ubuntu4.20
- 1.0.2g-1ubuntu4.20+esm1
- 1.0.2g-1ubuntu4.20+esm2
- 1.0.2g-1ubuntu4.20+esm3
- 1.0.2g-1ubuntu4.20+esm4
- 1.0.2g-1ubuntu4.20+esm5
- 1.0.2g-1ubuntu4.20+esm6
- 1.0.2g-1ubuntu4.20+esm7
- 1.0.2g-1ubuntu4.20+esm9
- 1.0.2g-1ubuntu4.20+esm10
- 1.0.2g-1ubuntu4.20+esm11
- 1.0.2g-1ubuntu4.20+esm12
- 1.0.2g-1ubuntu4.20+esm13
- 1.0.2g-1ubuntu4.20+esm14
- 1.0.2g-1ubuntu4.20+esm15
- 1.0.2g-1ubuntu4.20+esm16
- 1.0.2g-1ubuntu4.20+esm18
- 1.0.2g-1ubuntu4.20+esm19
- Betroffene Versionsbereiche
- ECOSYSTEM: (−∞, +∞)
Keine Korrektur veröffentlicht
edk2 Ubuntu:Pro:16.04:LTS
- Softwareversionen
- 0~20150106.5c2d456b-2
- 0~20160104.c2a892d7-1
- 0~20160408.ffea0a2c-2
- 0~20160408.ffea0a2c-2ubuntu0.1
- 0~20160408.ffea0a2c-2ubuntu0.2
- 0~20160408.ffea0a2c-2ubuntu0.2+esm1
- 0~20160408.ffea0a2c-2ubuntu0.2+esm3
- 0~20160408.ffea0a2c-2ubuntu0.2+esm4
- Betroffene Versionsbereiche
- ECOSYSTEM: (−∞, +∞)
Keine Korrektur veröffentlicht
openssl Ubuntu:Pro:FIPS-updates:16.04:LTS
- Softwareversionen
- 1.0.2g-1ubuntu4.fips.4.9.1
- 1.0.2g-1ubuntu4.fips.4.13.1
- 1.0.2g-1ubuntu4.fips.4.15.1
- 1.0.2g-1ubuntu4.fips.4.16.1
- 1.0.2g-1ubuntu4.fips.4.17.1
- 1.0.2g-1ubuntu4.fips.4.18.1
- 1.0.2g-1ubuntu4.fips.4.19.3
- 1.0.2g-1ubuntu4.fips.4.20.1
- 1.0.2g-1ubuntu4.fips.4.20.2
- 1.0.2g-1ubuntu4.fips.4.20.3
- 1.0.2g-1ubuntu4.fips.4.20.6
- 1.0.2g-1ubuntu4.fips.4.20.7
- 1.0.2g-1ubuntu4.fips.4.20.9
- 1.0.2g-1ubuntu4.fips.4.20.10
- 1.0.2g-1ubuntu4.fips.4.20.11
- 1.0.2g-1ubuntu4.fips.4.20.12
- 1.0.2g-1ubuntu4.fips.4.20.13
- 1.0.2g-1ubuntu4.fips.4.20.14
- 1.0.2g-1ubuntu4.fips.4.20.15
- Betroffene Versionsbereiche
- ECOSYSTEM: (−∞, +∞)
Keine Korrektur veröffentlicht
openssl Ubuntu:Pro:FIPS:16.04:LTS
- Softwareversionen
- 1.0.2g-1ubuntu4.fips.4.6~ppa1
- 1.0.2g-1ubuntu4.fips.4.6~ppa2
- 1.0.2g-1ubuntu4.fips.4.6~ppa3
- 1.0.2g-1ubuntu4.fips.4.6
- 1.0.2g-1ubuntu4.fips.4.6.1
- 1.0.2g-1ubuntu4.fips.4.6.2
- 1.0.2g-1ubuntu4.fips.4.6.3
- Betroffene Versionsbereiche
- ECOSYSTEM: (−∞, +∞)
Keine Korrektur veröffentlicht
openssl Ubuntu:Pro:18.04:LTS
- Softwareversionen
- 1.0.2g-1ubuntu13
- 1.0.2g-1ubuntu14
- 1.0.2n-1ubuntu1
- 1.1.0g-2ubuntu1
- 1.1.0g-2ubuntu2
- 1.1.0g-2ubuntu3
- 1.1.0g-2ubuntu4
- 1.1.0g-2ubuntu4.1
- 1.1.0g-2ubuntu4.3
- 1.1.1-1ubuntu2.1~18.04.1
- 1.1.1-1ubuntu2.1~18.04.2
- 1.1.1-1ubuntu2.1~18.04.3
- 1.1.1-1ubuntu2.1~18.04.4
- 1.1.1-1ubuntu2.1~18.04.5
- 1.1.1-1ubuntu2.1~18.04.6
- 1.1.1-1ubuntu2.1~18.04.7
- 1.1.1-1ubuntu2.1~18.04.8
- 1.1.1-1ubuntu2.1~18.04.9
- 1.1.1-1ubuntu2.1~18.04.10
- 1.1.1-1ubuntu2.1~18.04.13
- 1.1.1-1ubuntu2.1~18.04.14
- 1.1.1-1ubuntu2.1~18.04.15
- 1.1.1-1ubuntu2.1~18.04.17
- 1.1.1-1ubuntu2.1~18.04.19
- 1.1.1-1ubuntu2.1~18.04.20
- 1.1.1-1ubuntu2.1~18.04.21
- 1.1.1-1ubuntu2.1~18.04.22
- 1.1.1-1ubuntu2.1~18.04.23
- 1.1.1-1ubuntu2.1~18.04.23+esm1
- 1.1.1-1ubuntu2.1~18.04.23+esm3
- 1.1.1-1ubuntu2.1~18.04.23+esm4
- 1.1.1-1ubuntu2.1~18.04.23+esm5
- 1.1.1-1ubuntu2.1~18.04.23+esm6
- 1.1.1-1ubuntu2.1~18.04.23+esm7
- 1.1.1-1ubuntu2.1~18.04.23+esm8
- 1.1.1-1ubuntu2.1~18.04.23+esm9
- 1.1.1-1ubuntu2.1~18.04.23+esm10
- 1.1.1-1ubuntu2.1~18.04.23+esm11
- Betroffene Versionsbereiche
- ECOSYSTEM: (−∞, +∞)
Keine Korrektur veröffentlicht
openssl1.0 Ubuntu:Pro:18.04:LTS
- Softwareversionen
- 1.0.2n-1ubuntu2
- 1.0.2n-1ubuntu3
- 1.0.2n-1ubuntu4
- 1.0.2n-1ubuntu5
- 1.0.2n-1ubuntu5.1
- 1.0.2n-1ubuntu5.2
- 1.0.2n-1ubuntu5.3
- 1.0.2n-1ubuntu5.4
- 1.0.2n-1ubuntu5.5
- 1.0.2n-1ubuntu5.6
- 1.0.2n-1ubuntu5.7
- 1.0.2n-1ubuntu5.8
- 1.0.2n-1ubuntu5.9
- 1.0.2n-1ubuntu5.10
- 1.0.2n-1ubuntu5.11
- 1.0.2n-1ubuntu5.12
- 1.0.2n-1ubuntu5.13
- 1.0.2n-1ubuntu5.13+esm1
- 1.0.2n-1ubuntu5.13+esm2
- 1.0.2n-1ubuntu5.13+esm3
- 1.0.2n-1ubuntu5.13+esm4
- 1.0.2n-1ubuntu5.13+esm5
- 1.0.2n-1ubuntu5.13+esm6
- 1.0.2n-1ubuntu5.13+esm7
- Betroffene Versionsbereiche
- ECOSYSTEM: (−∞, +∞)
Keine Korrektur veröffentlicht
edk2 Ubuntu:Pro:18.04:LTS
- Softwareversionen
- 0~20170911.5dfba97c-1
- 0~20171010.234dbcef-1
- 0~20171027.76fd5a66-1
- 0~20171205.a9212288-1
- 0~20180105.0bc94c74-1
- 0~20180205.c0d9813c-1
- 0~20180205.c0d9813c-2
- 0~20180205.c0d9813c-2ubuntu0.1
- 0~20180205.c0d9813c-2ubuntu0.2
- 0~20180205.c0d9813c-2ubuntu0.3
- 0~20180205.c0d9813c-2ubuntu0.3+esm1
- 0~20180205.c0d9813c-2ubuntu0.3+esm2
- 0~20180205.c0d9813c-2ubuntu0.3+esm3
- Betroffene Versionsbereiche
- ECOSYSTEM: (−∞, +∞)
Keine Korrektur veröffentlicht
openssl Ubuntu:Pro:FIPS-updates:18.04:LTS
- Softwareversionen
- 1.1.1-1ubuntu2.fips.2.1~18.04.5.1
- 1.1.1-1ubuntu2.fips.2.1~18.04.6.1
- 1.1.1-1ubuntu2.fips.2.1~18.04.7.1
- 1.1.1-1ubuntu2.fips.2.1~18.04.9.1
- 1.1.1-1ubuntu2.fips.2.1~18.04.9.2
- 1.1.1-1ubuntu2.fips.2.1~18.04.9.3
- 1.1.1-1ubuntu2.fips.2.1~18.04.13.2
- 1.1.1-1ubuntu2.fips.2.1~18.04.15
- 1.1.1-1ubuntu2.fips.2.1~18.04.15.1
- 1.1.1-1ubuntu2.fips.2.1~18.04.15.2
- 1.1.1-1ubuntu2.fips.2.1~18.04.17
- 1.1.1-1ubuntu2.fips.2.1~18.04.20
- 1.1.1-1ubuntu2.fips.2.1~18.04.21
- 1.1.1-1ubuntu2.fips.2.1~18.04.22
- 1.1.1-1ubuntu2.fips.2.1~18.04.23
- 1.1.1-1ubuntu2.fips.2.1~18.04.23.3
- 1.1.1-1ubuntu2.fips.2.1~18.04.23.4
- 1.1.1-1ubuntu2.fips.2.1~18.04.23.5
- 1.1.1-1ubuntu2.fips.2.1~18.04.23.6
- 1.1.1-1ubuntu2.fips.2.1~18.04.23.7
- 1.1.1-1ubuntu2.fips.2.1~18.04.23.8
- 1.1.1-1ubuntu2.fips.2.1~18.04.23.9
- Betroffene Versionsbereiche
- ECOSYSTEM: (−∞, +∞)
Keine Korrektur veröffentlicht
openssl Ubuntu:Pro:FIPS:18.04:LTS
- Softwareversionen
- 1.1.1-1ubuntu2.fips.2.1~18.04.3.1
- 1.1.1-1ubuntu2.fips.2.1~18.04.15.2
- Betroffene Versionsbereiche
- ECOSYSTEM: (−∞, +∞)
Keine Korrektur veröffentlicht
openssl Ubuntu:20.04:LTS
- Softwareversionen
- 1.1.1c-1ubuntu4
- 1.1.1d-2ubuntu3
- 1.1.1d-2ubuntu6
- 1.1.1f-1ubuntu1
- 1.1.1f-1ubuntu2
- 1.1.1f-1ubuntu2.1
- 1.1.1f-1ubuntu2.2
- 1.1.1f-1ubuntu2.3
- 1.1.1f-1ubuntu2.4
- 1.1.1f-1ubuntu2.5
- 1.1.1f-1ubuntu2.8
- 1.1.1f-1ubuntu2.9
- 1.1.1f-1ubuntu2.10
- 1.1.1f-1ubuntu2.11
- 1.1.1f-1ubuntu2.12
- 1.1.1f-1ubuntu2.13
- 1.1.1f-1ubuntu2.15
- 1.1.1f-1ubuntu2.16
- 1.1.1f-1ubuntu2.17
- 1.1.1f-1ubuntu2.18
- 1.1.1f-1ubuntu2.19
- 1.1.1f-1ubuntu2.20
- 1.1.1f-1ubuntu2.21
- 1.1.1f-1ubuntu2.22
- 1.1.1f-1ubuntu2.23
- Betroffene Versionsbereiche
- ECOSYSTEM: < 1.1.1f-1ubuntu2.24
Auf 1.1.1f-1ubuntu2.24 aktualisieren
edk2 Ubuntu:Pro:20.04:LTS
- Softwareversionen
- 0~20190606.20d2e5a1-2ubuntu1
- 0~20190828.37eef910-3
- 0~20190828.37eef910-4
- 0~20191122.bd85bf54-1
- 0~20191122.bd85bf54-1ubuntu1
- 0~20191122.bd85bf54-2
- 0~20191122.bd85bf54-2ubuntu1
- 0~20191122.bd85bf54-2ubuntu2
- 0~20191122.bd85bf54-2ubuntu3
- 0~20191122.bd85bf54-2ubuntu3.1
- 0~20191122.bd85bf54-2ubuntu3.2
- 0~20191122.bd85bf54-2ubuntu3.3
- 0~20191122.bd85bf54-2ubuntu3.4
- 0~20191122.bd85bf54-2ubuntu3.5
- 0~20191122.bd85bf54-2ubuntu3.6
- 0~20191122.bd85bf54-2ubuntu3.6+esm1
- Betroffene Versionsbereiche
- ECOSYSTEM: (−∞, +∞)
Keine Korrektur veröffentlicht
openssl Ubuntu:Pro:FIPS-updates:20.04:LTS
- Softwareversionen
- 1.1.1f-1ubuntu2.fips.7
- 1.1.1f-1ubuntu2.fips.7.2
- 1.1.1f-1ubuntu2.fips.12
- 1.1.1f-1ubuntu2.fips.13
- 1.1.1f-1ubuntu2.fips.13.1
- 1.1.1f-1ubuntu2.fips.16
- 1.1.1f-1ubuntu2.fips.17
- 1.1.1f-1ubuntu2.fips.18
- 1.1.1f-1ubuntu2.fips.19
- 1.1.1f-1ubuntu2.fips.20
- 1.1.1f-1ubuntu2.fips.21
- 1.1.1f-1ubuntu2.fips.22
- Betroffene Versionsbereiche
- ECOSYSTEM: < 1.1.1f-1ubuntu2.fips.24
Auf 1.1.1f-1ubuntu2.fips.24 aktualisieren
openssl Ubuntu:Pro:FIPS:20.04:LTS
- Softwareversionen
- 1.1.1f-1ubuntu2.fips.2.8
- 1.1.1f-1ubuntu2.fips.7.1
- Betroffene Versionsbereiche
- ECOSYSTEM: (−∞, +∞)
Keine Korrektur veröffentlicht
edk2 Ubuntu:22.04:LTS
- Softwareversionen
- 2021.08~rc0-2
- 2021.08-3
- 2021.11~rc1-1
- 2021.11-1
- 2021.11-2
- 2022.02~rc1-1
- 2022.02~rc1-1ubuntu1
- 2022.02-1
- 2022.02-2
- 2022.02-3
- 2022.02-3ubuntu0.22.04.1
- 2022.02-3ubuntu0.22.04.2
- 2022.02-3ubuntu0.22.04.3
- Betroffene Versionsbereiche
- ECOSYSTEM: < 2022.02-3ubuntu0.22.04.4
Auf 2022.02-3ubuntu0.22.04.4 aktualisieren
openssl Ubuntu:22.04:LTS
- Softwareversionen
- 1.1.1l-1ubuntu1
- 3.0.0-1ubuntu1
- 3.0.1-0ubuntu1
- 3.0.2-0ubuntu1
- 3.0.2-0ubuntu1.1
- 3.0.2-0ubuntu1.2
- 3.0.2-0ubuntu1.4
- 3.0.2-0ubuntu1.5
- 3.0.2-0ubuntu1.6
- 3.0.2-0ubuntu1.7
- 3.0.2-0ubuntu1.8
- 3.0.2-0ubuntu1.9
- 3.0.2-0ubuntu1.10
- 3.0.2-0ubuntu1.12
- 3.0.2-0ubuntu1.13
- 3.0.2-0ubuntu1.14
- 3.0.2-0ubuntu1.15
- 3.0.2-0ubuntu1.16
- 3.0.2-0ubuntu1.17
- 3.0.2-0ubuntu1.18
- Betroffene Versionsbereiche
- ECOSYSTEM: < 3.0.2-0ubuntu1.19
Auf 3.0.2-0ubuntu1.19 aktualisieren
nodejs Ubuntu:Pro:22.04:LTS
- Softwareversionen
- 12.22.5~dfsg-5ubuntu1
- 12.22.7~dfsg-2ubuntu1
- 12.22.7~dfsg-2ubuntu3
- 12.22.9~dfsg-1ubuntu2
- 12.22.9~dfsg-1ubuntu3
- 12.22.9~dfsg-1ubuntu3.1
- 12.22.9~dfsg-1ubuntu3.2
- 12.22.9~dfsg-1ubuntu3.3
- 12.22.9~dfsg-1ubuntu3.4
- 12.22.9~dfsg-1ubuntu3.5
- 12.22.9~dfsg-1ubuntu3.6
- 12.22.9~dfsg-1ubuntu3.6+esm2
- Betroffene Versionsbereiche
- ECOSYSTEM: (−∞, +∞)
Keine Korrektur veröffentlicht
Originalquellen
- https://openssl-library.org/news/secadv/20250120.txt
- https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f
- https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902
- https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65
- https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467
- https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844
- https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86
- https://github.openssl.org/openssl/extended-releases/commit/0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded
- http://www.openwall.com/lists/oss-security/2025/01/20/2
- https://security.netapp.com/advisory/ntap-20250124-0005/
- https://security.netapp.com/advisory/ntap-20250418-0010/
- https://lists.debian.org/debian-lts-announce/2025/05/msg00028.html
- https://security.netapp.com/advisory/ntap-20250502-0006/
- https://nvd.nist.gov/vuln/detail/CVE-2024-13176