{"schema_version":"1.9.0","id":"CVE-2024-13176","published":"2025-01-20T13:29:57.047Z","modified":"2026-09-04T18:25:57.681199260Z","related":["ALSA-2025:15699","ALSA-2025:16046","CGA-3349-gw4v-v75q","SUSE-SU-2025:02042-1","SUSE-SU-2025:0345-1","SUSE-SU-2025:0349-1","SUSE-SU-2025:0356-1","SUSE-SU-2025:0387-1","SUSE-SU-2025:0388-1","SUSE-SU-2025:0390-1","SUSE-SU-2025:0430-1","SUSE-SU-2025:0613-1","SUSE-SU-2025:0613-2","SUSE-SU-2025:0613-3","SUSE-SU-2025:20233-1","SUSE-SU-2025:20406-1","SUSE-SU-2025:20464-1","SUSE-SU-2026:3835-1","USN-7264-1","openSUSE-SU-2025:14696-1"],"summary":"Timing side-channel in ECDSA signature computation","details":"Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.","affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/openssl/openssl","events":[{"introduced":"98acb6b02839c609ef5b837794e08d906d965335"},{"introduced":"4cb31128b5790819dfeea2739fbde265f71a10a2"},{"introduced":"cf2877791ce7508684109664f467c9e40987692f"},{"introduced":"a92271e03a8d0dee507b6f1e7f49512568b2c7ad"},{"introduced":"89cd17a031e022211684eb7eb41190cf1910f9fa"},{"introduced":"e04bd3433fd84e1861bf258ea37928d9845e6a86"},{"introduced":"e818b74be2170fbe957a07b0da4401c2b694b3b8"},{"fixed":"a26d85337dbdcd33c971f38eb3fa5150e75cea87"},{"fixed":"42768eafab40d3e2f0851caa84aa9801139c74ab"},{"fixed":"8ac4271233ecec5aa0468a5e7ae38dd642ebf365"},{"fixed":"77e6daafbad639584e1e4877172b3f9a777966dd"},{"fixed":"fa1e5dfb142bb1c26c3c38a10aafa7a095df52e5"},{"fixed":"e04bd3433fd84e1861bf258ea37928d9845e6a86"},{"fixed":"e818b74be2170fbe957a07b0da4401c2b694b3b8"},{"fixed":"07272b05b04836a762b4baa874958af51d513844"},{"fixed":"2af62e74fb59bc469506bc37eb2990ea408d9467"},{"fixed":"392dcb336405a0c94486aa6655057f59fd3a0902"},{"fixed":"4b1cb94a734a7d4ec363ac0a215a25c181e11f65"},{"fixed":"77c608f4c8857e63e98e66444e2e761c9627916f"}],"database_specific":{"extracted_events":[{"introduced":"3.4.0"},{"fixed":"3.4.1"},{"introduced":"3.3.0"},{"fixed":"3.3.3"},{"introduced":"3.2.0"},{"fixed":"3.2.4"},{"introduced":"3.1.0"},{"fixed":"3.1.8"},{"introduced":"3.0.0"},{"fixed":"3.0.16"},{"introduced":"1.1.1"},{"fixed":"1.1.1zb"},{"introduced":"1.0.2"},{"fixed":"1.0.2zl"}],"source":["AFFECTED_FIELD","REFERENCES"]}}],"versions":["openssl-3.4.0","openssl-3.0.15","openssl-3.1.7","openssl-3.2.3","openssl-3.3.2","openssl-3.0.14","openssl-3.1.6","openssl-3.2.2","openssl-3.3.1","openssl-3.3.0","openssl-3.0.13","openssl-3.1.5","openssl-3.2.1","openssl-3.2.0","openssl-3.0.12","openssl-3.1.4","openssl-3.0.11","openssl-3.1.3","openssl-3.0.10","openssl-3.1.2","openssl-3.0.9","openssl-3.1.1","openssl-3.1.0","openssl-3.0.8","openssl-3.0.7","openssl-3.0.6","openssl-3.0.5","openssl-3.0.4","openssl-3.0.3","openssl-3.0.2","openssl-3.0.1","openssl-3.0.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-13176.json","vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["127754948284799574646612715291914192370","107633108841617456827974748623002941","105128839132312456559305794417964519678","220978175685594651981552750147750539139","169600024918161393316340193772684852098","117654638435679831764459313705877108896","23928219980244535399498129546065066676","293745726617568990317434370779477363519"],"threshold":0.9},"id":"CVE-2024-13176-02b65757","signature_type":"Line","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65","target":{"file":"crypto/ec/ec_lib.c"}},{"deprecated":false,"digest":{"function_hash":"209975814518152852375258448294589197529","length":11318},"id":"CVE-2024-13176-1033742d","signature_type":"Function","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65","target":{"file":"crypto/bn/bn_exp.c","function":"BN_mod_exp_mont_consttime"}},{"deprecated":false,"digest":{"line_hashes":["173589800300154267675612065402467888493","129405406525769322493076198728768900113","136800792888609131789496600562783967119","159174750777734389295701369864010049181","158807332022056555706233351020895631932","81659307983826938737211959800551987670","65661878801926066286695416919387343632","331146051454193067843509155410151830908","106927928807750830570996030094648112881","246702777271085149088970109591189963124","13553649955201634036089378149381067019","48764857157202029741626741483796973376","50856018716436605684813922551136358229","334002642869357515784447868384854133811","63758175942037580590598196895455058189","191064388880109290899961512230526792681","25026424422371339317817700797451463299"],"threshold":0.9},"id":"CVE-2024-13176-17ac49d3","signature_type":"Line","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65","target":{"file":"crypto/bn/bn_exp.c"}},{"deprecated":false,"digest":{"function_hash":"209975814518152852375258448294589197529","length":11318},"id":"CVE-2024-13176-23514e34","signature_type":"Function","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902","target":{"file":"crypto/bn/bn_exp.c","function":"BN_mod_exp_mont_consttime"}},{"deprecated":false,"digest":{"line_hashes":["173589800300154267675612065402467888493","129405406525769322493076198728768900113","136800792888609131789496600562783967119","159174750777734389295701369864010049181","158807332022056555706233351020895631932","81659307983826938737211959800551987670","65661878801926066286695416919387343632","331146051454193067843509155410151830908","106927928807750830570996030094648112881","246702777271085149088970109591189963124","13553649955201634036089378149381067019","48764857157202029741626741483796973376","50856018716436605684813922551136358229","334002642869357515784447868384854133811","63758175942037580590598196895455058189","191064388880109290899961512230526792681","25026424422371339317817700797451463299"],"threshold":0.9},"id":"CVE-2024-13176-2d5a8353","signature_type":"Line","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902","target":{"file":"crypto/bn/bn_exp.c"}},{"deprecated":false,"digest":{"line_hashes":["251324203488872817167019601435108299733","40806596891362736307168808995206433787","112583956667954258596531188879431655895","138582937579070891515807629355127583885"],"threshold":0.9},"id":"CVE-2024-13176-37feae62","signature_type":"Line","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467","target":{"file":"include/crypto/bn.h"}},{"deprecated":false,"digest":{"line_hashes":["127754948284799574646612715291914192370","107633108841617456827974748623002941","105128839132312456559305794417964519678","220978175685594651981552750147750539139","169600024918161393316340193772684852098","117654638435679831764459313705877108896","23928219980244535399498129546065066676","293745726617568990317434370779477363519"],"threshold":0.9},"id":"CVE-2024-13176-3e8d1eb9","signature_type":"Line","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f","target":{"file":"crypto/ec/ec_lib.c"}},{"deprecated":false,"digest":{"line_hashes":["251324203488872817167019601435108299733","40806596891362736307168808995206433787","112583956667954258596531188879431655895","138582937579070891515807629355127583885"],"threshold":0.9},"id":"CVE-2024-13176-3f42d259","signature_type":"Line","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65","target":{"file":"include/crypto/bn.h"}},{"deprecated":false,"digest":{"line_hashes":["173589800300154267675612065402467888493","129405406525769322493076198728768900113","136800792888609131789496600562783967119","159174750777734389295701369864010049181","158807332022056555706233351020895631932","81659307983826938737211959800551987670","65661878801926066286695416919387343632","331146051454193067843509155410151830908","106927928807750830570996030094648112881","246702777271085149088970109591189963124","13553649955201634036089378149381067019","48764857157202029741626741483796973376","50856018716436605684813922551136358229","334002642869357515784447868384854133811","63758175942037580590598196895455058189","191064388880109290899961512230526792681","25026424422371339317817700797451463299"],"threshold":0.9},"id":"CVE-2024-13176-4140486d","signature_type":"Line","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844","target":{"file":"crypto/bn/bn_exp.c"}},{"deprecated":false,"digest":{"line_hashes":["251324203488872817167019601435108299733","40806596891362736307168808995206433787","112583956667954258596531188879431655895","138582937579070891515807629355127583885"],"threshold":0.9},"id":"CVE-2024-13176-48367449","signature_type":"Line","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844","target":{"file":"include/crypto/bn.h"}},{"deprecated":false,"digest":{"line_hashes":["173589800300154267675612065402467888493","129405406525769322493076198728768900113","136800792888609131789496600562783967119","159174750777734389295701369864010049181","158807332022056555706233351020895631932","81659307983826938737211959800551987670","65661878801926066286695416919387343632","331146051454193067843509155410151830908","106927928807750830570996030094648112881","246702777271085149088970109591189963124","13553649955201634036089378149381067019","48764857157202029741626741483796973376","50856018716436605684813922551136358229","334002642869357515784447868384854133811","63758175942037580590598196895455058189","191064388880109290899961512230526792681","25026424422371339317817700797451463299"],"threshold":0.9},"id":"CVE-2024-13176-619982cd","signature_type":"Line","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f","target":{"file":"crypto/bn/bn_exp.c"}},{"deprecated":false,"digest":{"line_hashes":["251324203488872817167019601435108299733","40806596891362736307168808995206433787","112583956667954258596531188879431655895","138582937579070891515807629355127583885"],"threshold":0.9},"id":"CVE-2024-13176-75a092d4","signature_type":"Line","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f","target":{"file":"include/crypto/bn.h"}},{"deprecated":false,"digest":{"line_hashes":["251324203488872817167019601435108299733","40806596891362736307168808995206433787","112583956667954258596531188879431655895","138582937579070891515807629355127583885"],"threshold":0.9},"id":"CVE-2024-13176-948094f9","signature_type":"Line","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902","target":{"file":"include/crypto/bn.h"}},{"deprecated":false,"digest":{"function_hash":"209975814518152852375258448294589197529","length":11318},"id":"CVE-2024-13176-952fba80","signature_type":"Function","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f","target":{"file":"crypto/bn/bn_exp.c","function":"BN_mod_exp_mont_consttime"}},{"deprecated":false,"digest":{"function_hash":"209975814518152852375258448294589197529","length":11318},"id":"CVE-2024-13176-9eef3609","signature_type":"Function","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844","target":{"file":"crypto/bn/bn_exp.c","function":"BN_mod_exp_mont_consttime"}},{"deprecated":false,"digest":{"line_hashes":["332405531834258800453855045674511600246","158343597431739389122396850815921490520","3701881040623673446980161294049765680","220978175685594651981552750147750539139","169600024918161393316340193772684852098","117654638435679831764459313705877108896","23928219980244535399498129546065066676","293745726617568990317434370779477363519"],"threshold":0.9},"id":"CVE-2024-13176-b885df34","signature_type":"Line","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844","target":{"file":"crypto/ec/ec_lib.c"}},{"deprecated":false,"digest":{"line_hashes":["28170854778703993674264004058177114599","73132526844288570625317440636111911761","177405411499435185068645597737938634778","224809958623850711330610094965797758930","295554444428855106393106961197201359586"],"threshold":0.9},"id":"CVE-2024-13176-c377fa22","signature_type":"Line","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/e04bd3433fd84e1861bf258ea37928d9845e6a86","target":{"file":"include/openssl/opensslv.h"}},{"deprecated":false,"digest":{"function_hash":"209975814518152852375258448294589197529","length":11318},"id":"CVE-2024-13176-cd7ba068","signature_type":"Function","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467","target":{"file":"crypto/bn/bn_exp.c","function":"BN_mod_exp_mont_consttime"}},{"deprecated":false,"digest":{"line_hashes":["173589800300154267675612065402467888493","129405406525769322493076198728768900113","136800792888609131789496600562783967119","159174750777734389295701369864010049181","158807332022056555706233351020895631932","81659307983826938737211959800551987670","65661878801926066286695416919387343632","331146051454193067843509155410151830908","106927928807750830570996030094648112881","246702777271085149088970109591189963124","13553649955201634036089378149381067019","48764857157202029741626741483796973376","50856018716436605684813922551136358229","334002642869357515784447868384854133811","63758175942037580590598196895455058189","191064388880109290899961512230526792681","25026424422371339317817700797451463299"],"threshold":0.9},"id":"CVE-2024-13176-d57277e7","signature_type":"Line","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467","target":{"file":"crypto/bn/bn_exp.c"}},{"deprecated":false,"digest":{"line_hashes":["251633914150035957322733061977107206211","338514574181828579838011565939158652696","76638288692106140328510055542557597351","142922657400765574308962710386922248045","71649992455794854055653842592139575350","65527166711110472566013424527579064967","253196866009476977787139000804413898733","172177136897997206866313011107384691461"],"threshold":0.9},"id":"CVE-2024-13176-e051451f","signature_type":"Line","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/e818b74be2170fbe957a07b0da4401c2b694b3b8","target":{"file":"crypto/opensslv.h"}},{"deprecated":false,"digest":{"line_hashes":["127754948284799574646612715291914192370","107633108841617456827974748623002941","105128839132312456559305794417964519678","220978175685594651981552750147750539139","169600024918161393316340193772684852098","117654638435679831764459313705877108896","23928219980244535399498129546065066676","293745726617568990317434370779477363519"],"threshold":0.9},"id":"CVE-2024-13176-f39a6b13","signature_type":"Line","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902","target":{"file":"crypto/ec/ec_lib.c"}},{"deprecated":false,"digest":{"line_hashes":["332405531834258800453855045674511600246","158343597431739389122396850815921490520","3701881040623673446980161294049765680","220978175685594651981552750147750539139","169600024918161393316340193772684852098","117654638435679831764459313705877108896","23928219980244535399498129546065066676","293745726617568990317434370779477363519"],"threshold":0.9},"id":"CVE-2024-13176-fe59c5b4","signature_type":"Line","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467","target":{"file":"crypto/ec/ec_lib.c"}}],"vanir_signatures_modified":"2026-08-12T15:14:56Z"}}],"references":[{"type":"WEB","url":"http://www.openwall.com/lists/oss-security/2025/01/20/2"},{"type":"WEB","url":"https://lists.debian.org/debian-lts-announce/2025/05/msg00028.html"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/13xxx/CVE-2024-13176.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-13176"},{"type":"ADVISORY","url":"https://openssl-library.org/news/secadv/20250120.txt"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20250124-0005/"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20250418-0010/"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20250502-0006/"},{"type":"FIX","url":"https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844"},{"type":"FIX","url":"https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467"},{"type":"FIX","url":"https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902"},{"type":"FIX","url":"https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65"},{"type":"FIX","url":"https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f"},{"type":"FIX","url":"https://github.openssl.org/openssl/extended-releases/commit/0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded"},{"type":"FIX","url":"https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86"}],"database_specific":{"cna_assigner":"openssl","cwe_ids":["CWE-385"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/13xxx/CVE-2024-13176.json"},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"}]}