p PatchFirst

CVE-2024-45191

CVE-2024-45191

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An issue was discovered in Matrix libolm through 3.2.16. The AES implementation is vulnerable to cache-timing attacks due to use of S-boxes. This is related to software that uses a lookup table for the SubWord step. This refers to the libolm implementation of Olm. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

CVSS 5.3 · Medium · EPSS 0.5%

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • olm Debian:12

    Versions
    • 3.2.13~dfsg-1
    • 3.2.15~dfsg-1
    • 3.2.16+dfsg-1
    • 3.2.16+dfsg-2
    • 3.2.16+dfsg-3
    • 3.2.16+dfsg-4
    • 3.2.16+dfsg-5
    • 3.2.16+dfsg-6
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • olm Debian:13

    Versions
    • 3.2.16+dfsg-3
    • 3.2.16+dfsg-4
    • 3.2.16+dfsg-5
    • 3.2.16+dfsg-6
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • olm Debian:14

    Versions
    • 3.2.16+dfsg-3
    • 3.2.16+dfsg-4
    • 3.2.16+dfsg-5
    • 3.2.16+dfsg-6
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • olm Ubuntu:18.04:LTS

    Versions
    • 2.2.2+git20170526.0fd768e+dfsg-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • olm Ubuntu:Pro:20.04:LTS

    Versions
    • 3.1.3+dfsg-2
    • 3.1.3+dfsg-2build1
    • 3.1.3+dfsg-2build2
    • 3.1.3+dfsg-2ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • olm Ubuntu:22.04:LTS

    Versions
    • 3.2.1~dfsg-7ubuntu2
    • 3.2.1~dfsg-7ubuntu3
    • 3.2.10~dfsg-4ubuntu1
    • 3.2.10~dfsg-5ubuntu1
    • 3.2.10~dfsg-6ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • olm Ubuntu:24.04:LTS

    Versions
    • 3.2.13~dfsg-1ubuntu1
    • 3.2.15~dfsg-1ubuntu1
    • 3.2.16+dfsg-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • olm Ubuntu:25.10

    Versions
    • 3.2.16+dfsg-3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • olm Ubuntu:26.10

    Versions
    • 3.2.16+dfsg-5
    • 3.2.16+dfsg-6
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • olm Ubuntu:26.04:LTS

    Versions
    • 3.2.16+dfsg-3
    • 3.2.16+dfsg-5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →