Vulnerability-Lookup

SUSE-SU-2024:2298-1

Vulnerability from csaf_suse - Published: 2024-07-04 07:08 - Updated: 2026-09-20 15:57

Summary

Security update for openCryptoki

Severity

Moderate

Notes

Title of the patch: Security update for openCryptoki

Description of the patch: This update for openCryptoki fixes the following issues: openCryptoki was updated to version to 3.17.0 (bsc#1220266, bsc#1219217) + openCryptoki 3.17 - tools: added function to list keys to p11sak - common: added support for OpenSSL 3.0 - common: added support for event notifications - ICA: added SW fallbacks + openCryptoki 3.16 - EP11: protected-key option - EP11: support attribute-bound keys - CCA: import and export of secure key objects - Bug fixes + openCryptoki 3.15.1 - Bug fixes + openCryptoki 3.15 - common: conform to PKCS 11 3.0 Baseline Provider profile - Introduce new vendor defined interface named 'Vendor IBM' - Support C_IBM_ReencryptSingle via 'Vendor IBM' interface - CCA: support key wrapping - SOFT: support ECC - p11sak tool: add remove-key command - Bug fixes + openCryptoki 3.14 - EP11: Dilitium support stage 2 - Common: Rework on process and thread locking - Common: Rework on btree and object locking - ICSF: minor fixes - TPM, ICA, ICSF: support multiple token instances - new tool p11sak + openCryptoki 3.13.0 - EP11: Dilithium support - EP11: EdDSA support - EP11: support RSA-OAEP with non-SHA1 hash and MGF + openCryptoki 3.12.1 - Fix pkcsep11_migrate tool + openCryptoki 3.12.0 - Update token pin and data store encryption for soft,ica,cca and ep11 - EP11: Allow importing of compressed EC public keys - EP11: Add support for the CMAC mechanisms - EP11: Add support for the IBM-SHA3 mechanisms - SOFT: Add AES-CMAC and 3DES-CMAC support to the soft token - ICA: Add AES-CMAC and 3DES-CMAC support to the ICA token - EP11: Add config option USE_PRANDOM - CCA: Use Random Number Generate Long for token_specific_rng() - Common rng function: Prefer /dev/prandom over /dev/urandom - ICA: add SHA*_RSA_PKCS_PSS mechanisms - Bug fixes

Patchnames: SUSE-2024-2298,SUSE-SLE-SDK-12-SP5-2024-2298,SUSE-SLE-SERVER-12-SP5-2024-2298

CVE-2024-0914

5.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

Recommended 20 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:openCryptoki-0:3.17.0-5.9.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:openCryptoki-0:3.17.0-5.9.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:openCryptoki-0:3.17.0-5.9.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:openCryptoki-0:3.17.0-5.9.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:openCryptoki-32bit-0:3.17.0-5.9.2.s390	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:openCryptoki-64bit-0:3.17.0-5.9.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:openCryptoki-64bit-0:3.17.0-5.9.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:openCryptoki-64bit-0:3.17.0-5.9.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.x86_64	—	Vendor Fix

Threats

Impact moderate

References

9 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/s…	self
https://www.suse.com/support/update/announcement/…	self
https://lists.suse.com/pipermail/sle-security-upd…	self
https://bugzilla.suse.com/1219217	self
https://bugzilla.suse.com/1220266	self
https://www.suse.com/security/cve/CVE-2024-0914/	self
https://www.suse.com/security/cve/CVE-2024-0914	external
https://bugzilla.suse.com/1219217	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for openCryptoki",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for openCryptoki fixes the following issues:\n\nopenCryptoki was updated to version to 3.17.0 (bsc#1220266, bsc#1219217)\n\n+ openCryptoki 3.17\n\n - tools: added function to list keys to p11sak\n - common: added support for OpenSSL 3.0\n - common: added support for event notifications\n - ICA: added SW fallbacks\n\n+ openCryptoki 3.16\n\n - EP11: protected-key option\n - EP11: support attribute-bound keys\n - CCA: import and export of secure key objects\n - Bug fixes\n\n+ openCryptoki 3.15.1\n\n - Bug fixes\n\n+ openCryptoki 3.15\n\n - common: conform to PKCS 11 3.0 Baseline Provider profile\n - Introduce new vendor defined interface named \u0027Vendor IBM\u0027\n - Support C_IBM_ReencryptSingle via \u0027Vendor IBM\u0027 interface\n - CCA: support key wrapping\n - SOFT: support ECC\n - p11sak tool: add remove-key command\n - Bug fixes\n\n+ openCryptoki 3.14\n\n - EP11: Dilitium support stage 2\n - Common: Rework on process and thread locking\n - Common: Rework on btree and object locking\n - ICSF: minor fixes\n - TPM, ICA, ICSF: support multiple token instances\n - new tool p11sak\n\n+ openCryptoki 3.13.0\n\n - EP11: Dilithium support\n - EP11: EdDSA support\n - EP11: support RSA-OAEP with non-SHA1 hash and MGF\n\n+ openCryptoki 3.12.1\n\n - Fix pkcsep11_migrate tool\n\n+ openCryptoki 3.12.0\n\n - Update token pin and data store encryption for soft,ica,cca and ep11\n - EP11: Allow importing of compressed EC public keys\n - EP11: Add support for the CMAC mechanisms\n - EP11: Add support for the IBM-SHA3 mechanisms\n - SOFT: Add AES-CMAC and 3DES-CMAC support to the soft token\n - ICA: Add AES-CMAC and 3DES-CMAC support to the ICA token\n - EP11: Add config option USE_PRANDOM\n - CCA: Use Random Number Generate Long for token_specific_rng()\n - Common rng function: Prefer /dev/prandom over /dev/urandom\n - ICA: add SHA*_RSA_PKCS_PSS mechanisms\n - Bug fixes  \n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2024-2298,SUSE-SLE-SDK-12-SP5-2024-2298,SUSE-SLE-SERVER-12-SP5-2024-2298",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_2298-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2024:2298-1",
        "url": "https://www.suse.com/support/update/announcement/2024/suse-su-20242298-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2024:2298-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-July/018865.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1219217",
        "url": "https://bugzilla.suse.com/1219217"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1220266",
        "url": "https://bugzilla.suse.com/1220266"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-0914 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-0914/"
      }
    ],
    "title": "Security update for openCryptoki",
    "tracking": {
      "current_release_date": "2026-09-20T15:57:11Z",
      "generator": {
        "date": "2024-07-04T07:08:40Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2024:2298-1",
      "initial_release_date": "2024-07-04T07:08:40Z",
      "revision_history": [
        {
          "date": "2024-07-04T07:08:40Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-20T15:57:11Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openCryptoki-0:3.17.0-5.9.2.aarch64",
                "product": {
                  "name": "openCryptoki-0:3.17.0-5.9.2.aarch64",
                  "product_id": "openCryptoki-0:3.17.0-5.9.2.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:opencryptoki_project:opencryptoki:3.17.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/openCryptoki@3.17.0-5.9.2?arch=aarch64\u0026upstream=openCryptoki-0:3.17.0-5.9.2.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openCryptoki-64bit-0:3.17.0-5.9.2.aarch64",
                "product": {
                  "name": "openCryptoki-64bit-0:3.17.0-5.9.2.aarch64",
                  "product_id": "openCryptoki-64bit-0:3.17.0-5.9.2.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:opencryptoki_project:opencryptoki:3.17.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/openCryptoki-64bit@3.17.0-5.9.2?arch=aarch64\u0026upstream=openCryptoki-0:3.17.0-5.9.2.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openCryptoki-devel-0:3.17.0-5.9.2.aarch64",
                "product": {
                  "name": "openCryptoki-devel-0:3.17.0-5.9.2.aarch64",
                  "product_id": "openCryptoki-devel-0:3.17.0-5.9.2.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:opencryptoki_project:opencryptoki:3.17.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/openCryptoki-devel@3.17.0-5.9.2?arch=aarch64\u0026upstream=openCryptoki-0:3.17.0-5.9.2.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openCryptoki-0:3.17.0-5.9.2.i586",
                "product": {
                  "name": "openCryptoki-0:3.17.0-5.9.2.i586",
                  "product_id": "openCryptoki-0:3.17.0-5.9.2.i586",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:opencryptoki_project:opencryptoki:3.17.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/openCryptoki@3.17.0-5.9.2?arch=i586\u0026upstream=openCryptoki-0:3.17.0-5.9.2.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openCryptoki-32bit-0:3.17.0-5.9.2.i586",
                "product": {
                  "name": "openCryptoki-32bit-0:3.17.0-5.9.2.i586",
                  "product_id": "openCryptoki-32bit-0:3.17.0-5.9.2.i586",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:opencryptoki_project:opencryptoki:3.17.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/openCryptoki-32bit@3.17.0-5.9.2?arch=i586\u0026upstream=openCryptoki-0:3.17.0-5.9.2.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openCryptoki-devel-0:3.17.0-5.9.2.i586",
                "product": {
                  "name": "openCryptoki-devel-0:3.17.0-5.9.2.i586",
                  "product_id": "openCryptoki-devel-0:3.17.0-5.9.2.i586",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:opencryptoki_project:opencryptoki:3.17.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/openCryptoki-devel@3.17.0-5.9.2?arch=i586\u0026upstream=openCryptoki-0:3.17.0-5.9.2.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openCryptoki-0:3.17.0-5.9.2.ppc64le",
                "product": {
                  "name": "openCryptoki-0:3.17.0-5.9.2.ppc64le",
                  "product_id": "openCryptoki-0:3.17.0-5.9.2.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:opencryptoki_project:opencryptoki:3.17.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/openCryptoki@3.17.0-5.9.2?arch=ppc64le\u0026upstream=openCryptoki-0:3.17.0-5.9.2.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openCryptoki-64bit-0:3.17.0-5.9.2.ppc64le",
                "product": {
                  "name": "openCryptoki-64bit-0:3.17.0-5.9.2.ppc64le",
                  "product_id": "openCryptoki-64bit-0:3.17.0-5.9.2.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:opencryptoki_project:opencryptoki:3.17.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/openCryptoki-64bit@3.17.0-5.9.2?arch=ppc64le\u0026upstream=openCryptoki-0:3.17.0-5.9.2.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openCryptoki-devel-0:3.17.0-5.9.2.ppc64le",
                "product": {
                  "name": "openCryptoki-devel-0:3.17.0-5.9.2.ppc64le",
                  "product_id": "openCryptoki-devel-0:3.17.0-5.9.2.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:opencryptoki_project:opencryptoki:3.17.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/openCryptoki-devel@3.17.0-5.9.2?arch=ppc64le\u0026upstream=openCryptoki-0:3.17.0-5.9.2.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openCryptoki-0:3.17.0-5.9.2.s390",
                "product": {
                  "name": "openCryptoki-0:3.17.0-5.9.2.s390",
                  "product_id": "openCryptoki-0:3.17.0-5.9.2.s390",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:opencryptoki_project:opencryptoki:3.17.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/openCryptoki@3.17.0-5.9.2?arch=s390\u0026upstream=openCryptoki-0:3.17.0-5.9.2.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openCryptoki-32bit-0:3.17.0-5.9.2.s390",
                "product": {
                  "name": "openCryptoki-32bit-0:3.17.0-5.9.2.s390",
                  "product_id": "openCryptoki-32bit-0:3.17.0-5.9.2.s390",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:opencryptoki_project:opencryptoki:3.17.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/openCryptoki-32bit@3.17.0-5.9.2?arch=s390\u0026upstream=openCryptoki-0:3.17.0-5.9.2.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openCryptoki-devel-0:3.17.0-5.9.2.s390",
                "product": {
                  "name": "openCryptoki-devel-0:3.17.0-5.9.2.s390",
                  "product_id": "openCryptoki-devel-0:3.17.0-5.9.2.s390",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:opencryptoki_project:opencryptoki:3.17.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/openCryptoki-devel@3.17.0-5.9.2?arch=s390\u0026upstream=openCryptoki-0:3.17.0-5.9.2.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openCryptoki-0:3.17.0-5.9.2.s390x",
                "product": {
                  "name": "openCryptoki-0:3.17.0-5.9.2.s390x",
                  "product_id": "openCryptoki-0:3.17.0-5.9.2.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:opencryptoki_project:opencryptoki:3.17.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/openCryptoki@3.17.0-5.9.2?arch=s390x\u0026upstream=openCryptoki-0:3.17.0-5.9.2.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openCryptoki-64bit-0:3.17.0-5.9.2.s390x",
                "product": {
                  "name": "openCryptoki-64bit-0:3.17.0-5.9.2.s390x",
                  "product_id": "openCryptoki-64bit-0:3.17.0-5.9.2.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:opencryptoki_project:opencryptoki:3.17.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/openCryptoki-64bit@3.17.0-5.9.2?arch=s390x\u0026upstream=openCryptoki-0:3.17.0-5.9.2.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openCryptoki-devel-0:3.17.0-5.9.2.s390x",
                "product": {
                  "name": "openCryptoki-devel-0:3.17.0-5.9.2.s390x",
                  "product_id": "openCryptoki-devel-0:3.17.0-5.9.2.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:opencryptoki_project:opencryptoki:3.17.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/openCryptoki-devel@3.17.0-5.9.2?arch=s390x\u0026upstream=openCryptoki-0:3.17.0-5.9.2.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openCryptoki-0:3.17.0-5.9.2.x86_64",
                "product": {
                  "name": "openCryptoki-0:3.17.0-5.9.2.x86_64",
                  "product_id": "openCryptoki-0:3.17.0-5.9.2.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:opencryptoki_project:opencryptoki:3.17.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/openCryptoki@3.17.0-5.9.2?arch=x86_64\u0026upstream=openCryptoki-0:3.17.0-5.9.2.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openCryptoki-64bit-0:3.17.0-5.9.2.x86_64",
                "product": {
                  "name": "openCryptoki-64bit-0:3.17.0-5.9.2.x86_64",
                  "product_id": "openCryptoki-64bit-0:3.17.0-5.9.2.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:opencryptoki_project:opencryptoki:3.17.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/openCryptoki-64bit@3.17.0-5.9.2?arch=x86_64\u0026upstream=openCryptoki-0:3.17.0-5.9.2.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openCryptoki-devel-0:3.17.0-5.9.2.x86_64",
                "product": {
                  "name": "openCryptoki-devel-0:3.17.0-5.9.2.x86_64",
                  "product_id": "openCryptoki-devel-0:3.17.0-5.9.2.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:opencryptoki_project:opencryptoki:3.17.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/openCryptoki-devel@3.17.0-5.9.2?arch=x86_64\u0026upstream=openCryptoki-0:3.17.0-5.9.2.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Software Development Kit 12 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise Software Development Kit 12 SP5",
                  "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-sdk:12:sp5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP5",
                  "product_id": "SUSE Linux Enterprise Server 12 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:12:sp5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12:sp5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise High Performance Computing 12 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise High Performance Computing 12 SP5",
                  "product_id": "SUSE Linux Enterprise High Performance Computing 12 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-hpc:12:sp5"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openCryptoki-devel-0:3.17.0-5.9.2.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.aarch64"
        },
        "product_reference": "openCryptoki-devel-0:3.17.0-5.9.2.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openCryptoki-devel-0:3.17.0-5.9.2.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.ppc64le"
        },
        "product_reference": "openCryptoki-devel-0:3.17.0-5.9.2.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openCryptoki-devel-0:3.17.0-5.9.2.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.s390x"
        },
        "product_reference": "openCryptoki-devel-0:3.17.0-5.9.2.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openCryptoki-devel-0:3.17.0-5.9.2.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.x86_64"
        },
        "product_reference": "openCryptoki-devel-0:3.17.0-5.9.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openCryptoki-devel-0:3.17.0-5.9.2.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.aarch64"
        },
        "product_reference": "openCryptoki-devel-0:3.17.0-5.9.2.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openCryptoki-devel-0:3.17.0-5.9.2.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.ppc64le"
        },
        "product_reference": "openCryptoki-devel-0:3.17.0-5.9.2.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openCryptoki-devel-0:3.17.0-5.9.2.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.s390x"
        },
        "product_reference": "openCryptoki-devel-0:3.17.0-5.9.2.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openCryptoki-devel-0:3.17.0-5.9.2.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.x86_64"
        },
        "product_reference": "openCryptoki-devel-0:3.17.0-5.9.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openCryptoki-devel-0:3.17.0-5.9.2.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.aarch64"
        },
        "product_reference": "openCryptoki-devel-0:3.17.0-5.9.2.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openCryptoki-devel-0:3.17.0-5.9.2.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.ppc64le"
        },
        "product_reference": "openCryptoki-devel-0:3.17.0-5.9.2.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openCryptoki-devel-0:3.17.0-5.9.2.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.s390x"
        },
        "product_reference": "openCryptoki-devel-0:3.17.0-5.9.2.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openCryptoki-devel-0:3.17.0-5.9.2.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.x86_64"
        },
        "product_reference": "openCryptoki-devel-0:3.17.0-5.9.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openCryptoki-0:3.17.0-5.9.2.aarch64 as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise High Performance Computing 12 SP5:openCryptoki-0:3.17.0-5.9.2.aarch64"
        },
        "product_reference": "openCryptoki-0:3.17.0-5.9.2.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openCryptoki-0:3.17.0-5.9.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise High Performance Computing 12 SP5:openCryptoki-0:3.17.0-5.9.2.ppc64le"
        },
        "product_reference": "openCryptoki-0:3.17.0-5.9.2.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openCryptoki-0:3.17.0-5.9.2.s390x as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise High Performance Computing 12 SP5:openCryptoki-0:3.17.0-5.9.2.s390x"
        },
        "product_reference": "openCryptoki-0:3.17.0-5.9.2.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openCryptoki-0:3.17.0-5.9.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise High Performance Computing 12 SP5:openCryptoki-0:3.17.0-5.9.2.x86_64"
        },
        "product_reference": "openCryptoki-0:3.17.0-5.9.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openCryptoki-32bit-0:3.17.0-5.9.2.s390 as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise High Performance Computing 12 SP5:openCryptoki-32bit-0:3.17.0-5.9.2.s390"
        },
        "product_reference": "openCryptoki-32bit-0:3.17.0-5.9.2.s390",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openCryptoki-64bit-0:3.17.0-5.9.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise High Performance Computing 12 SP5:openCryptoki-64bit-0:3.17.0-5.9.2.ppc64le"
        },
        "product_reference": "openCryptoki-64bit-0:3.17.0-5.9.2.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openCryptoki-64bit-0:3.17.0-5.9.2.s390x as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise High Performance Computing 12 SP5:openCryptoki-64bit-0:3.17.0-5.9.2.s390x"
        },
        "product_reference": "openCryptoki-64bit-0:3.17.0-5.9.2.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openCryptoki-64bit-0:3.17.0-5.9.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise High Performance Computing 12 SP5:openCryptoki-64bit-0:3.17.0-5.9.2.x86_64"
        },
        "product_reference": "openCryptoki-64bit-0:3.17.0-5.9.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12 SP5"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-0914",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-0914"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A timing side-channel vulnerability has been discovered in the opencryptoki package while processing RSA PKCS#1 v1.5 padded ciphertexts. This flaw could potentially enable unauthorized RSA ciphertext decryption or signing, even without access to the corresponding private key.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Performance Computing 12 SP5:openCryptoki-0:3.17.0-5.9.2.aarch64",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:openCryptoki-0:3.17.0-5.9.2.ppc64le",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:openCryptoki-0:3.17.0-5.9.2.s390x",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:openCryptoki-0:3.17.0-5.9.2.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:openCryptoki-32bit-0:3.17.0-5.9.2.s390",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:openCryptoki-64bit-0:3.17.0-5.9.2.ppc64le",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:openCryptoki-64bit-0:3.17.0-5.9.2.s390x",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:openCryptoki-64bit-0:3.17.0-5.9.2.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.aarch64",
          "SUSE Linux Enterprise Server 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.s390x",
          "SUSE Linux Enterprise Server 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-0914",
          "url": "https://www.suse.com/security/cve/CVE-2024-0914"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1219217 for CVE-2024-0914",
          "url": "https://bugzilla.suse.com/1219217"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Performance Computing 12 SP5:openCryptoki-0:3.17.0-5.9.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:openCryptoki-0:3.17.0-5.9.2.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:openCryptoki-0:3.17.0-5.9.2.s390x",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:openCryptoki-0:3.17.0-5.9.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:openCryptoki-32bit-0:3.17.0-5.9.2.s390",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:openCryptoki-64bit-0:3.17.0-5.9.2.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:openCryptoki-64bit-0:3.17.0-5.9.2.s390x",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:openCryptoki-64bit-0:3.17.0-5.9.2.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.s390x",
            "SUSE Linux Enterprise Server 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Performance Computing 12 SP5:openCryptoki-0:3.17.0-5.9.2.aarch64",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:openCryptoki-0:3.17.0-5.9.2.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:openCryptoki-0:3.17.0-5.9.2.s390x",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:openCryptoki-0:3.17.0-5.9.2.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:openCryptoki-32bit-0:3.17.0-5.9.2.s390",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:openCryptoki-64bit-0:3.17.0-5.9.2.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:openCryptoki-64bit-0:3.17.0-5.9.2.s390x",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:openCryptoki-64bit-0:3.17.0-5.9.2.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.aarch64",
            "SUSE Linux Enterprise Server 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.s390x",
            "SUSE Linux Enterprise Server 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:openCryptoki-devel-0:3.17.0-5.9.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-07-04T07:08:40Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-0914"
    }
  ]
}

CVE-2024-0914 (GCVE-0-2024-0914)

Vulnerability from cvelistv5 – Published: 2024-01-31 04:53 – Updated: 2026-03-24 11:28

Title

Opencryptoki: timing side-channel in handling of rsa pkcs#1 v1.5 padded ciphertexts (marvin)

Summary

A timing side-channel vulnerability has been discovered in the opencryptoki package while processing RSA PKCS#1 v1.5 padded ciphertexts. This flaw could potentially enable unauthorized RSA ciphertext decryption or signing, even without access to the corresponding private key.

Severity

5.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-08-23 18:54 UTC

CWE

CWE-203 - Observable Discrepancy

Assigner

redhat CNA under the redhat root

CNA scorecard B 81/100 over 976 records in the last 180 days details

References

8 references

URL	Tags
https://access.redhat.com/errata/RHSA-2024:1239	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:1411	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:1608	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:1856	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:1992	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2024-0914	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2260407	issue-trackingx_refsource_REDHAT
https://people.redhat.com/~hkario/marvin/

Impacted products

8 products

Vendor	Product	Version
		Affected: 3.0.0 , < 3.23.0 (semver)
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:3.21.0-10.el8_9 , < * (rpm) cpe:/o:redhat:enterprise_linux:8::baseos cpe:/a:redhat:enterprise_linux:8::crb
Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support	Unaffected: 0:3.17.0-6.el8_6 , < * (rpm) cpe:/a:redhat:rhel_eus:8.6::crb cpe:/o:redhat:rhel_eus:8.6::baseos
Red Hat	Red Hat Enterprise Linux 8.8 Extended Update Support	Unaffected: 0:3.19.0-3.el8_8 , < * (rpm) cpe:/o:redhat:rhel_eus:8.8::baseos cpe:/a:redhat:rhel_eus:8.8::crb
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:3.21.0-9.el9_3 , < * (rpm) cpe:/a:redhat:enterprise_linux:9::crb cpe:/o:redhat:enterprise_linux:9::baseos
Red Hat	Red Hat Enterprise Linux 9.2 Extended Update Support	Unaffected: 0:3.19.0-3.el9_2 , < * (rpm) cpe:/a:redhat:rhel_eus:9.2::crb cpe:/o:redhat:rhel_eus:9.2::baseos
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7

Date Public

2024-01-25 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T18:18:18.984Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2024:1239",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:1239"
          },
          {
            "name": "RHSA-2024:1411",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:1411"
          },
          {
            "name": "RHSA-2024:1608",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:1608"
          },
          {
            "name": "RHSA-2024:1856",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:1856"
          },
          {
            "name": "RHSA-2024:1992",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2024:1992"
          },
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2024-0914"
          },
          {
            "name": "RHBZ#2260407",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2260407"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://people.redhat.com/~hkario/marvin/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-0914",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-08-23T18:54:25.749075Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-08-23T18:55:32.813Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://github.com/opencryptoki/opencryptoki",
          "defaultStatus": "unaffected",
          "packageName": "opencryptoki",
          "versions": [
            {
              "lessThan": "3.23.0",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8::baseos",
            "cpe:/a:redhat:enterprise_linux:8::crb"
          ],
          "defaultStatus": "affected",
          "packageName": "opencryptoki",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.21.0-10.el8_9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:8.6::crb",
            "cpe:/o:redhat:rhel_eus:8.6::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "opencryptoki",
          "product": "Red Hat Enterprise Linux 8.6 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.17.0-6.el8_6",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_eus:8.8::baseos",
            "cpe:/a:redhat:rhel_eus:8.8::crb"
          ],
          "defaultStatus": "affected",
          "packageName": "opencryptoki",
          "product": "Red Hat Enterprise Linux 8.8 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.19.0-3.el8_8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::crb",
            "cpe:/o:redhat:enterprise_linux:9::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "opencryptoki",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.21.0-9.el9_3",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:9.2::crb",
            "cpe:/o:redhat:rhel_eus:9.2::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "opencryptoki",
          "product": "Red Hat Enterprise Linux 9.2 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.19.0-3.el9_2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:6"
          ],
          "defaultStatus": "unknown",
          "packageName": "opencryptoki",
          "product": "Red Hat Enterprise Linux 6",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7"
          ],
          "defaultStatus": "unknown",
          "packageName": "opencryptoki",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        }
      ],
      "datePublic": "2024-01-25T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A timing side-channel vulnerability has been discovered in the opencryptoki package while processing RSA PKCS#1 v1.5 padded ciphertexts. This flaw could potentially enable unauthorized RSA ciphertext decryption or signing, even without access to the corresponding private key."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Moderate"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-203",
              "description": "Observable Discrepancy",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-24T11:28:22.174Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2024:1239",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:1239"
        },
        {
          "name": "RHSA-2024:1411",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:1411"
        },
        {
          "name": "RHSA-2024:1608",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:1608"
        },
        {
          "name": "RHSA-2024:1856",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:1856"
        },
        {
          "name": "RHSA-2024:1992",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2024:1992"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2024-0914"
        },
        {
          "name": "RHBZ#2260407",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2260407"
        },
        {
          "url": "https://people.redhat.com/~hkario/marvin/"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2024-01-25T00:00:00.000Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2024-01-25T00:00:00.000Z",
          "value": "Made public."
        }
      ],
      "title": "Opencryptoki: timing side-channel in handling of rsa pkcs#1 v1.5 padded ciphertexts (marvin)",
      "workarounds": [
        {
          "lang": "en",
          "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-203: Observable Discrepancy"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2024-0914",
    "datePublished": "2024-01-31T04:53:28.508Z",
    "dateReserved": "2024-01-25T22:28:25.811Z",
    "dateUpdated": "2026-03-24T11:28:22.174Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

SUSE-SU-2024:2298-1

CVE-2024-0914 (GCVE-0-2024-0914)

Tags

Sightings

Nomenclature

Related by attack behaviour