CVE-2024-13176
- Source
- https://cve.org/CVERecord?id=CVE-2024-13176
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-13176.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2024-13176
- Downstream
- Related
- Published
- 2025-01-20T13:29:57Z
- Modified
- 2026-09-09T15:50:59Z
- Severity
-
- 4.1 (Medium) CVSS_V3 - CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L CVSS Calculator
- Summary
- Timing side-channel in ECDSA signature computation
- Details
-
Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation.
Impact summary: A timing side-channel in ECDSA signature computations could allow recovering the private key by an attacker. However, measuring the timing would require either local access to the signing application or a very fast network connection with low latency.
There is a timing signal of around 300 nanoseconds when the top word of the inverted ECDSA nonce value is zero. This can happen with significant probability only for some of the supported elliptic curves. In particular the NIST P-521 curve is affected. To be able to measure this leak, the attacker process must either be located in the same physical computer or must have a very fast network connection with low latency. For that reason the severity of this vulnerability is Low.
The FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.
- Database specific
{ "cna_assigner": "openssl", "cwe_ids": [ "CWE-385" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/13xxx/CVE-2024-13176.json" }- References
-
- http://www.openwall.com/lists/oss-security/2025/01/20/2
- https://lists.debian.org/debian-lts-announce/2025/05/msg00028.html
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/13xxx/CVE-2024-13176.json
- https://nvd.nist.gov/vuln/detail/CVE-2024-13176
- https://openssl-library.org/news/secadv/20250120.txt
- https://security.netapp.com/advisory/ntap-20250124-0005/
- https://security.netapp.com/advisory/ntap-20250418-0010/
- https://security.netapp.com/advisory/ntap-20250502-0006/
- https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844
- https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467
- https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902
- https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65
- https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f
- https://github.openssl.org/openssl/extended-releases/commit/0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded
- https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86
Affected packages
Git / github.com/openssl/openssl
Affected ranges
- Type
- GIT
- Repo
- https://github.com/openssl/openssl
- Events
-
IntroducedIntroducedIntroducedIntroducedIntroducedIntroducedIntroducedFixedFixedFixedFixedFixedFixedFixedFixedFixedFixedFixedFixed
- Database specific
-
Show details
{ "extracted_events": [ { "introduced": "3.4.0" }, { "fixed": "3.4.1" }, { "introduced": "3.3.0" }, { "fixed": "3.3.3" }, { "introduced": "3.2.0" }, { "fixed": "3.2.4" }, { "introduced": "3.1.0" }, { "fixed": "3.1.8" }, { "introduced": "3.0.0" }, { "fixed": "3.0.16" }, { "introduced": "1.1.1" }, { "fixed": "1.1.1zb" }, { "introduced": "1.0.2" }, { "fixed": "1.0.2zl" } ], "source": [ "AFFECTED_FIELD", "REFERENCES" ] }
Database specific
source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-13176.json"
vanir_signatures
[
{
"deprecated": false,
"digest": {
"line_hashes": [
"127754948284799574646612715291914192370",
"107633108841617456827974748623002941",
"105128839132312456559305794417964519678",
"220978175685594651981552750147750539139",
"169600024918161393316340193772684852098",
"117654638435679831764459313705877108896",
"23928219980244535399498129546065066676",
"293745726617568990317434370779477363519"
],
"threshold": 0.9
},
"id": "CVE-2024-13176-02b65757",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65",
"target": {
"file": "crypto/ec/ec_lib.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"227289184607936123042847166539399605026",
"301804664818318515002029985544958406393",
"281640860276829317870241943565090034590",
"42300937228587669491448957702606411256",
"327697935414145030383442306507222077314"
],
"threshold": 0.9
},
"id": "CVE-2024-13176-0f1fc87e",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/d82e959e621a3d597f1e0d50ff8c2d8b96915fd7",
"target": {
"file": "include/openssl/opensslv.h"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "209975814518152852375258448294589197529",
"length": 11318
},
"id": "CVE-2024-13176-1033742d",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65",
"target": {
"file": "crypto/bn/bn_exp.c",
"function": "BN_mod_exp_mont_consttime"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"173589800300154267675612065402467888493",
"129405406525769322493076198728768900113",
"136800792888609131789496600562783967119",
"159174750777734389295701369864010049181",
"158807332022056555706233351020895631932",
"81659307983826938737211959800551987670",
"65661878801926066286695416919387343632",
"331146051454193067843509155410151830908",
"106927928807750830570996030094648112881",
"246702777271085149088970109591189963124",
"13553649955201634036089378149381067019",
"48764857157202029741626741483796973376",
"50856018716436605684813922551136358229",
"334002642869357515784447868384854133811",
"63758175942037580590598196895455058189",
"191064388880109290899961512230526792681",
"25026424422371339317817700797451463299"
],
"threshold": 0.9
},
"id": "CVE-2024-13176-17ac49d3",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65",
"target": {
"file": "crypto/bn/bn_exp.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "209975814518152852375258448294589197529",
"length": 11318
},
"id": "CVE-2024-13176-23514e34",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902",
"target": {
"file": "crypto/bn/bn_exp.c",
"function": "BN_mod_exp_mont_consttime"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"173589800300154267675612065402467888493",
"129405406525769322493076198728768900113",
"136800792888609131789496600562783967119",
"159174750777734389295701369864010049181",
"158807332022056555706233351020895631932",
"81659307983826938737211959800551987670",
"65661878801926066286695416919387343632",
"331146051454193067843509155410151830908",
"106927928807750830570996030094648112881",
"246702777271085149088970109591189963124",
"13553649955201634036089378149381067019",
"48764857157202029741626741483796973376",
"50856018716436605684813922551136358229",
"334002642869357515784447868384854133811",
"63758175942037580590598196895455058189",
"191064388880109290899961512230526792681",
"25026424422371339317817700797451463299"
],
"threshold": 0.9
},
"id": "CVE-2024-13176-2d5a8353",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902",
"target": {
"file": "crypto/bn/bn_exp.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"251324203488872817167019601435108299733",
"40806596891362736307168808995206433787",
"112583956667954258596531188879431655895",
"138582937579070891515807629355127583885"
],
"threshold": 0.9
},
"id": "CVE-2024-13176-37feae62",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467",
"target": {
"file": "include/crypto/bn.h"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"127754948284799574646612715291914192370",
"107633108841617456827974748623002941",
"105128839132312456559305794417964519678",
"220978175685594651981552750147750539139",
"169600024918161393316340193772684852098",
"117654638435679831764459313705877108896",
"23928219980244535399498129546065066676",
"293745726617568990317434370779477363519"
],
"threshold": 0.9
},
"id": "CVE-2024-13176-3e8d1eb9",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f",
"target": {
"file": "crypto/ec/ec_lib.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"251324203488872817167019601435108299733",
"40806596891362736307168808995206433787",
"112583956667954258596531188879431655895",
"138582937579070891515807629355127583885"
],
"threshold": 0.9
},
"id": "CVE-2024-13176-3f42d259",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65",
"target": {
"file": "include/crypto/bn.h"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"173589800300154267675612065402467888493",
"129405406525769322493076198728768900113",
"136800792888609131789496600562783967119",
"159174750777734389295701369864010049181",
"158807332022056555706233351020895631932",
"81659307983826938737211959800551987670",
"65661878801926066286695416919387343632",
"331146051454193067843509155410151830908",
"106927928807750830570996030094648112881",
"246702777271085149088970109591189963124",
"13553649955201634036089378149381067019",
"48764857157202029741626741483796973376",
"50856018716436605684813922551136358229",
"334002642869357515784447868384854133811",
"63758175942037580590598196895455058189",
"191064388880109290899961512230526792681",
"25026424422371339317817700797451463299"
],
"threshold": 0.9
},
"id": "CVE-2024-13176-4140486d",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844",
"target": {
"file": "crypto/bn/bn_exp.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"19539661553841879622633679962680969091",
"133036846096550422788696208295706083216",
"2879305035241628928916436793475403947",
"58235332148236106609765445750408197531",
"276728337026316762965321377235658470601",
"243010485815873192586173884473010295078",
"175492772248432625447345810599597002812",
"150097312491038494195658212970374645525"
],
"threshold": 0.9
},
"id": "CVE-2024-13176-425a4aad",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/7b560c174dcd569795f5be66e0c091d1be440614",
"target": {
"file": "crypto/opensslv.h"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"251324203488872817167019601435108299733",
"40806596891362736307168808995206433787",
"112583956667954258596531188879431655895",
"138582937579070891515807629355127583885"
],
"threshold": 0.9
},
"id": "CVE-2024-13176-48367449",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844",
"target": {
"file": "include/crypto/bn.h"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"173589800300154267675612065402467888493",
"129405406525769322493076198728768900113",
"136800792888609131789496600562783967119",
"159174750777734389295701369864010049181",
"158807332022056555706233351020895631932",
"81659307983826938737211959800551987670",
"65661878801926066286695416919387343632",
"331146051454193067843509155410151830908",
"106927928807750830570996030094648112881",
"246702777271085149088970109591189963124",
"13553649955201634036089378149381067019",
"48764857157202029741626741483796973376",
"50856018716436605684813922551136358229",
"334002642869357515784447868384854133811",
"63758175942037580590598196895455058189",
"191064388880109290899961512230526792681",
"25026424422371339317817700797451463299"
],
"threshold": 0.9
},
"id": "CVE-2024-13176-619982cd",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f",
"target": {
"file": "crypto/bn/bn_exp.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"251324203488872817167019601435108299733",
"40806596891362736307168808995206433787",
"112583956667954258596531188879431655895",
"138582937579070891515807629355127583885"
],
"threshold": 0.9
},
"id": "CVE-2024-13176-75a092d4",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f",
"target": {
"file": "include/crypto/bn.h"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"251324203488872817167019601435108299733",
"40806596891362736307168808995206433787",
"112583956667954258596531188879431655895",
"138582937579070891515807629355127583885"
],
"threshold": 0.9
},
"id": "CVE-2024-13176-948094f9",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902",
"target": {
"file": "include/crypto/bn.h"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "209975814518152852375258448294589197529",
"length": 11318
},
"id": "CVE-2024-13176-952fba80",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f",
"target": {
"file": "crypto/bn/bn_exp.c",
"function": "BN_mod_exp_mont_consttime"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "209975814518152852375258448294589197529",
"length": 11318
},
"id": "CVE-2024-13176-9eef3609",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844",
"target": {
"file": "crypto/bn/bn_exp.c",
"function": "BN_mod_exp_mont_consttime"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"332405531834258800453855045674511600246",
"158343597431739389122396850815921490520",
"3701881040623673446980161294049765680",
"220978175685594651981552750147750539139",
"169600024918161393316340193772684852098",
"117654638435679831764459313705877108896",
"23928219980244535399498129546065066676",
"293745726617568990317434370779477363519"
],
"threshold": 0.9
},
"id": "CVE-2024-13176-b885df34",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844",
"target": {
"file": "crypto/ec/ec_lib.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "209975814518152852375258448294589197529",
"length": 11318
},
"id": "CVE-2024-13176-cd7ba068",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467",
"target": {
"file": "crypto/bn/bn_exp.c",
"function": "BN_mod_exp_mont_consttime"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"173589800300154267675612065402467888493",
"129405406525769322493076198728768900113",
"136800792888609131789496600562783967119",
"159174750777734389295701369864010049181",
"158807332022056555706233351020895631932",
"81659307983826938737211959800551987670",
"65661878801926066286695416919387343632",
"331146051454193067843509155410151830908",
"106927928807750830570996030094648112881",
"246702777271085149088970109591189963124",
"13553649955201634036089378149381067019",
"48764857157202029741626741483796973376",
"50856018716436605684813922551136358229",
"334002642869357515784447868384854133811",
"63758175942037580590598196895455058189",
"191064388880109290899961512230526792681",
"25026424422371339317817700797451463299"
],
"threshold": 0.9
},
"id": "CVE-2024-13176-d57277e7",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467",
"target": {
"file": "crypto/bn/bn_exp.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"127754948284799574646612715291914192370",
"107633108841617456827974748623002941",
"105128839132312456559305794417964519678",
"220978175685594651981552750147750539139",
"169600024918161393316340193772684852098",
"117654638435679831764459313705877108896",
"23928219980244535399498129546065066676",
"293745726617568990317434370779477363519"
],
"threshold": 0.9
},
"id": "CVE-2024-13176-f39a6b13",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902",
"target": {
"file": "crypto/ec/ec_lib.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"332405531834258800453855045674511600246",
"158343597431739389122396850815921490520",
"3701881040623673446980161294049765680",
"220978175685594651981552750147750539139",
"169600024918161393316340193772684852098",
"117654638435679831764459313705877108896",
"23928219980244535399498129546065066676",
"293745726617568990317434370779477363519"
],
"threshold": 0.9
},
"id": "CVE-2024-13176-fe59c5b4",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467",
"target": {
"file": "crypto/ec/ec_lib.c"
}
}
]
vanir_signatures_modified
"2026-09-09T15:50:59Z"