Skip to content
Fencer Vulns
medium 4.6

CVE-2024-13176 json

Timing side-channel in ECDSA signature computation

published 2025-01-20 21 mo ago modified 2026-11-06 2 d ago also EUVD-2024-51400 , GHSA-r9fv-h47r-823f , JLSEC-2026-248

cvss
4.6
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.6%
EPSS 0.6% chance of exploitation in 30 days, percentile 51%
public exploits
0
none known

Summary

Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation.

Impact summary: A timing side-channel in ECDSA signature computations could allow recovering the private key by an attacker. However, measuring the timing would require either local access to the signing application or a very fast network connection with low latency.

There is a timing signal of around 300 nanoseconds when the top word of the inverted ECDSA nonce value is zero. This can happen with significant probability only for some of the supported elliptic curves. In particular the NIST P-521 curve is affected. To be able to measure this leak, the attacker process must either be located in the same physical computer or must have a very fast network connection with low latency. For that reason the severity of this vulnerability is Low.

The FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.

Patch / fix

  • julia OpenSSL_jll 3.0.16+0
  • julia Openresty_jll 1.29.203+0
  • OpenSSL OpenSSL 1.0.2zl, 1.1.1zb, 3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.1
  • edk2 Debian 13 2025.02-8+deb13u1
  • edk2 Debian 14 2025.02-9
  • openssl Debian 12 3.0.16-1~deb12u1
  • openssl Debian 14, Debian 13 3.4.1-1

debian advisories DEBIAN-CVE-2024-13176

  • edk2 Ubuntu 22.04 LTS 2022.02-3ubuntu0.22.04.4
  • edk2 Ubuntu 24.04 LTS 2024.02-2ubuntu0.6
  • edk2 Ubuntu 26.04 LTS, Ubuntu 25.10 2025.02-8ubuntu3
  • openssl Ubuntu 20.04 LTS 1.1.1f-1ubuntu2.24
  • openssl Ubuntu 22.04 LTS 3.0.2-0ubuntu1.19
  • openssl Ubuntu 24.04 LTS 3.0.13-0ubuntu3.5
  • openssl Ubuntu Pro FIPS-updates 20.04 LTS 1.1.1f-1ubuntu2.fips.24
  • openssl Ubuntu Pro FIPS-updates 22.04 LTS 3.0.2-0ubuntu1.19+Fips1

ubuntu advisories UBUNTU-CVE-2024-13176

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • openssl-3 SLE Module for Basesystem 15 SP7 3.5.0-150700.5.45.2
  • openssl SLE Module for Basesystem 15 SP7 3.5.0-150700.3.4.1
  • nodejs24 SLE Module for Web and Scripting 15 SP7 24.18.1-150700.15.18.1
  • openssl-3 Linux Micro 6.0 3.1.4-9.1
  • openssl-3 SLE Module for Basesystem 15 SP7 3.2.3-150700.5.5.1
  • openssl-3 Linux Micro 6.0 3.1.4-8.1
  • openssl-1_1 SLE Module for Legacy 15 SP6, SLE Module for Development Tools 15 SP6, SLE Module for Certifications 15 SP7 +2 more 1.1.1w-150600.5.12.2
  • openssl-3 Linux Micro 6.1 3.1.4-slfo.1.1_4.1

suse advisories SUSE-SU-2026:3835-1SUSE-SU-2025:20464-1SUSE-SU-2025:02042-1SUSE-SU-2025:20406-1SUSE-SU-2025:0613-2SUSE-SU-2025:0613-3

  • openssl-3 openSUSE Tumbleweed 3.2.3-4.1

opensuse advisories openSUSE-SU-2025:14696-1

  • mecab AlmaLinux 9 0.996-3.module_el9.6.0+152+8cbce00c.4
  • mysql AlmaLinux 9 8.4.6-1.module_el9.6.0+180+a4e757e5
  • mysql-libs AlmaLinux 9 8.4.6-1.module_el9.6.0+180+a4e757e5
  • mysql-test AlmaLinux 9 8.4.6-1.module_el9.6.0+180+a4e757e5
  • mecab-ipadic AlmaLinux 9 2.7.0.20070801-24.module_el9.6.0+152+8cbce00c
  • mysql-common AlmaLinux 9 8.4.6-1.module_el9.6.0+180+a4e757e5
  • mysql-errmsg AlmaLinux 9 8.4.6-1.module_el9.6.0+180+a4e757e5
  • mysql-server AlmaLinux 9 8.4.6-1.module_el9.6.0+180+a4e757e5

almalinux advisories ALSA-2025:16046ALSA-2025:15699

  • mysql8.4 Rocky Linux 10 8.4.6-2.el10_0
  • mysql-selinux Rocky Linux 10 1.0.14-1.el10_0

rocky linux advisories RLSA-2025:15699

  • openssl Alpine 3.17 3.0.19-r0
  • openssl Alpine 3.19, Alpine 3.18 3.1.8-r0
  • openssl Alpine 3.20 3.3.2-r2
  • openssl Alpine 3.24, Alpine 3.23, Alpine 3.22 +1 more 3.3.2-r5

alpine advisories ALPINE-CVE-2024-13176

Alpine secdb © Alpine Linux, from https://secdb.alpinelinux.org via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • openssl Azure Linux 3.0 3.3.3-1
  • edk2 Azure Linux 3.0 20240524git3e722403cd16-6
  • openssl CBL-Mariner 2.0 1.1.1k-36

azure linux advisories AZL-55889AZL-55894AZL-56010

Azure Linux vulnerability data, Copyright (c) Microsoft Corporation, from https://github.com/microsoft/AzureLinuxVulnerabilityData via OSV, under the MIT licence; changed: normalised to fixed package versions per release. MIT

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2024-13176 updated cvss 4.7

openssl: Timing side-channel in ECDSA signature computation

  • Red Hat Logging Subsystem for Red Hat OpenShift openshift-logging/fluentd-rhel8 Red Hat 3scale API Management Platform 2 3scale-amp2/backend-rhel7 Red Hat Enterprise Linux 6 openssl, openssl-perl Red Hat Enterprise Linux 7 ovmf, OVMF, AAVMF, openssl, openssl-libs, openssl-perl Red Hat Enterprise Linux 8 edk2, shim, openssl, shim-x64, edk2-ovmf, shim-aa64, +9 more Red Hat Enterprise Linux 9 edk2, shim, openssl, ruby-30, ruby-33, shim-x64, +9 more
    +5 more products
    Red Hat Enterprise Linux 10 edk2, shim, openssl, flatpak-sdk Red Hat JBoss Core Services openssl Red Hat OpenShift Container Platform 4 openshift/ose-rhel-coreos-8, openshift/ose-rhel-coreos-9 Red Hat Trusted Artifact Signer rhtas/tuffer-rhel9, rhtas/tuftool-rhel9 Red Hat Trusted Profile Analyzer rhtpa-trustification-service-rhel9
    affected: no fix available “Fix deferred”
  • Red Hat OpenShift AI (RHOAI) rhoai/odh-core-bff-rhel9, rhoai/odh-dashboard-rhel9, rhoai/odh-mod-arch-maas-rhel9, rhoai/odh-mod-arch-automl-rhel9, rhoai/odh-mod-arch-gen-ai-rhel9, rhoai/odh-mod-arch-mlflow-rhel9, +6 more
    under investigation
  • Red Hat OpenShift AI (RHOAI) rhoai/odh-mlflow-rhel9, rhoai/odh-kube-rbac-proxy-rhel9, rhoai/odh-maas-controller-rhel9, rhoai/odh-mlflow-operator-rhel9, rhoai/odh-model-controller-rhel9, rhoai/odh-ogx-k8s-operator-rhel9, +14 more
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
21 mo ago

Exploit prediction

0.64% chance of exploitation in the next 30 days, higher than 51% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CISA ADP 3.1 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CNA 3.1 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
OSV 3.1 4.1 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Affected packages

ecosystem package affected fixed in
julia OpenSSL_jll
<3.0.16+0
3.0.16+0
julia Openresty_jll
<1.29.203+0
1.29.203+0

Affected products

  • OpenSSL OpenSSL

Classification

Weakness
Technology feeds

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

CPEs and fixed versions use Anchore's correction of NVD's data: Added CPE configurations because not yet analyzed by NVD.