Description
Issue summary: A timing side-channel which could potentially allow recovering
the private key exists in the ECDSA signature computation.
Impact summary: A timing side-channel in ECDSA signature computations
could allow recovering the private key by an attacker. However, measuring
the timing would require either local access to the signing application or
a very fast network connection with low latency.
There is a timing signal of around 300 nanoseconds when the top word of
the inverted ECDSA nonce value is zero. This can happen with significant
probability only for some of the supported elliptic curves. In particular
the NIST P-521 curve is affected. To be able to measure this leak, the attacker
process must either be located in the same physical computer or must
have a very fast network connection with low latency. For that reason
the severity of this vulnerability is Low.
The FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenSSL | OpenSSL | 3.4.0 – < 3.4.1, 3.3.0 – < 3.3.3, 3.2.0 – < 3.2.4, 3.1.0 – < 3.1.8, 3.0.0 – < 3.0.16, 1.1.1 – < 1.1.1zb, 1.0.2 – < 1.0.2zl | 3.4.1 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | edk2 | 2025.02-9 | — |
| Debian 14 | openssl | 3.4.1-1 | — |
| Debian 13 | edk2 | 2025.02-8+deb13u1 | — |
| Debian 13 | openssl | 3.4.1-1 | — |
| Debian 12 | edk2 | No fix yet | — |
| Debian 12 | openssl | 3.0.16-1~deb12u1 | — |
| Debian 11 | openssl | 1.1.1w-0+deb11u3 | DLA-4176-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.04 LTS | edk2 | 2025.02-8ubuntu3 | — |
| Ubuntu 25.10 | edk2 | 2025.02-8ubuntu3 | — |
| Ubuntu 24.04 LTS | edk2 | 2024.02-2ubuntu0.6 | USN-7894-1 |
| Ubuntu 24.04 LTS | openssl | 3.0.13-0ubuntu3.5 | USN-7278-1 |
| Ubuntu 22.04 LTS | edk2 | 2022.02-3ubuntu0.22.04.4 | USN-7894-1 |
| Ubuntu 22.04 LTS | openssl | 3.0.2-0ubuntu1.19 | USN-7278-1 |
| Ubuntu 20.04 LTS | openssl | 1.1.1f-1ubuntu2.24 | USN-7278-1 |
Show 14 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro FIPS 20.04 LTS | openssl | No fix yet | — |
| Ubuntu Pro FIPS 18.04 LTS | openssl | No fix yet | — |
| Ubuntu Pro FIPS 16.04 LTS | openssl | No fix yet | — |
| Ubuntu Pro FIPS-updates 24.04 LTS | openssl-fips | 3.0.13-0ubuntu3.6+Fips1 | — |
| Ubuntu Pro FIPS-updates 22.04 LTS | openssl | 3.0.2-0ubuntu1.19+Fips1 | — |
| Ubuntu Pro FIPS-updates 22.04 LTS | openssl-fips | No fix yet | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | openssl | 1.1.1f-1ubuntu2.fips.24 | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | openssl | No fix yet | — |
| Ubuntu Pro FIPS-updates 16.04 LTS | openssl | No fix yet | — |
| Ubuntu Pro FIPS-preview 22.04 LTS | openssl +1 | No fix yet | — |
| Ubuntu Pro 22.04 LTS | nodejs | No fix yet | — |
| Ubuntu Pro 20.04 LTS | edk2 | No fix yet | — |
| Ubuntu Pro 18.04 LTS | edk2 +2 | No fix yet | — |
| Ubuntu Pro 16.04 LTS | edk2 +1 | No fix yet | — |
| Ubuntu Pro 14.04 LTS | openssl | No fix yet | — |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 10 | mysql-selinux | 1.0.14-1.el10_0 | ALSA-2025:15699 |
| AlmaLinux 10 | mysql8.4-common +2 | 8.4.6-2.el10_0 | ALSA-2025:15699 |
| AlmaLinux 9 | mecab +1 | 0.996-3.module_el9.6.0+152+8cbce00c.4 | ALSA-2025:16046 |
| AlmaLinux 9 | mecab-ipadic +1 | 2.7.0.20070801-24.module_el9.6.0+152+8cbce00c | ALSA-2025:16046 |
| AlmaLinux 9 | mysql +7 | 8.4.6-1.module_el9.6.0+180+a4e757e5 | ALSA-2025:16046 |
| AlmaLinux 9 | rapidjson-doc +1 | 1.1.0-19.module_el9.6.0+152+8cbce00c | ALSA-2025:16046 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | mysql-selinux | 1.0.14-1.el10_0 | RLSA-2025:15699 |
| Rocky Linux 10 | mysql8.4 | 8.4.6-2.el10_0 | RLSA-2025:15699 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | nodejs24 | 24.18.1-150700.15.18.1 | SUSE-SU-2026:3835-1 |
| SLES 15 SP7 | openssl | 3.5.0-150700.3.4.1 | SUSE-SU-2026:3835-1 |
| SLES 15 SP7 | openssl-1_1 | 1.1.1w-150600.5.12.2 | SUSE-SU-2025:0613-3, SUSE-SU-2025:0613-2 |
| SLES 15 SP7 | openssl-3 | 3.2.3-150700.5.5.1 | SUSE-SU-2026:3835-1, SUSE-SU-2025:02042-1 |
| SLES 15 SP6 | openssl-1_1 | 1.1.1w-150600.5.12.2 | SUSE-SU-2025:0613-1 |
| SLES 15 SP6 | openssl-3 | 3.1.4-150600.5.24.1 | SUSE-SU-2025:0430-1 |
| SLES 15 SP5 | openssl-1_1 | 1.1.1l-150500.17.40.1 | SUSE-SU-2025:0345-1 |
| SLES 15 SP5 | openssl-3 | 3.0.8-150500.5.51.1 | SUSE-SU-2025:0387-1 |
| SLES 15 SP4 | openssl-1_1 | 1.1.1l-150400.7.78.1 | SUSE-SU-2025:0349-1 |
| SLES 15 SP4 | openssl-3 | 3.0.8-150400.4.72.1 | SUSE-SU-2025:0388-1 |
| SLES 15 SP3 | openssl-1_1 | 1.1.1d-150200.11.100.1 | SUSE-SU-2025:0356-1 |
Show 17 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP5 | openssl-1_1 | 1.1.1d-2.116.1 | SUSE-SU-2025:0390-1 |
| SLES for SAP 15 SP5 | openssl-1_1 | 1.1.1l-150500.17.40.1 | SUSE-SU-2025:0345-1 |
| SLES for SAP 15 SP5 | openssl-3 | 3.0.8-150500.5.51.1 | SUSE-SU-2025:0387-1 |
| SLES for SAP 15 SP4 | openssl-1_1 | 1.1.1l-150400.7.78.1 | SUSE-SU-2025:0349-1 |
| SLES for SAP 15 SP4 | openssl-3 | 3.0.8-150400.4.72.1 | SUSE-SU-2025:0388-1 |
| SLES for SAP 15 SP3 | openssl-1_1 | 1.1.1d-150200.11.100.1 | SUSE-SU-2025:0356-1 |
| SLE Micro 6.1 | openssl-3 | 3.1.4-slfo.1.1_4.1 | SUSE-SU-2025:20233-1 |
| SLE Micro 6.0 | openssl-3 | 3.1.4-8.1 | SUSE-SU-2025:20464-1, SUSE-SU-2025:20406-1 |
| SLE Micro 5.5 | openssl-1_1 | 1.1.1l-150500.17.40.1 | SUSE-SU-2025:0345-1 |
| SLE Micro 5.4 | openssl-1_1 | 1.1.1l-150400.7.78.1 | SUSE-SU-2025:0349-1 |
| SLE Micro 5.4 | openssl-3 | 3.0.8-150400.4.72.1 | SUSE-SU-2025:0388-1 |
| SLE Micro 5.3 | openssl-1_1 | 1.1.1l-150400.7.78.1 | SUSE-SU-2025:0349-1 |
| SLE Micro 5.3 | openssl-3 | 3.0.8-150400.4.72.1 | SUSE-SU-2025:0388-1 |
| SLE Micro 5.2 | openssl-1_1 | 1.1.1d-150200.11.100.1 | SUSE-SU-2025:0356-1 |
| SLE Micro 5.1 | openssl-1_1 | 1.1.1d-150200.11.100.1 | SUSE-SU-2025:0356-1 |
| SLE HPC 15 SP5 | openssl-1_1 | 1.1.1l-150500.17.40.1 | SUSE-SU-2025:0345-1 |
| SLE HPC 15 SP5 | openssl-3 | 3.0.8-150500.5.51.1 | SUSE-SU-2025:0387-1 |
| SLE HPC 15 SP4 | openssl-1_1 | 1.1.1l-150400.7.78.1 | SUSE-SU-2025:0349-1 |
| SLE HPC 15 SP4 | openssl-3 | 3.0.8-150400.4.72.1 | SUSE-SU-2025:0388-1 |
| SLE HPC 15 SP3 | openssl-1_1 | 1.1.1d-150200.11.100.1 | SUSE-SU-2025:0356-1 |
| SUSE Manager Server 4.3 | openssl-1_1 | 1.1.1l-150400.7.78.1 | SUSE-SU-2025:0349-1 |
| SUSE Manager Server 4.3 | openssl-3 | 3.0.8-150400.4.72.1 | SUSE-SU-2025:0388-1 |
| SUSE Manager Proxy 4.3 | openssl-1_1 | 1.1.1l-150400.7.78.1 | SUSE-SU-2025:0349-1 |
| SUSE Manager Proxy 4.3 | openssl-3 | 3.0.8-150400.4.72.1 | SUSE-SU-2025:0388-1 |
| SUSE Enterprise Storage 7.1 | openssl-1_1 | 1.1.1d-150200.11.100.1 | SUSE-SU-2025:0356-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | openssl-3 | 3.2.3-4.1 | openSUSE-SU-2025:14696-1 |
| openSUSE Leap 15.6 | openssl-1_1 | 1.1.1w-150600.5.12.2 | SUSE-SU-2025:0613-1 |
| openSUSE Leap 15.6 | openssl-3 | 3.1.4-150600.5.24.1 | SUSE-SU-2025:0430-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | openssl | 3.3.2-r5 | — |
| Alpine v3.23 | openssl | 3.3.2-r5 | — |
| Alpine v3.22 | openssl | 3.3.2-r5 | — |
| Alpine v3.21 | openssl | 3.3.2-r5 | — |
| Alpine v3.20 | openssl | 3.3.2-r2 | — |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | openssl | 3.1.8-r0 | — |
| Alpine v3.18 | openssl | 3.1.8-r0 | — |
| Alpine v3.17 | openssl | 3.0.19-r0 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | openssl +4 | 1:3.0.8-1.amzn2023.0.19 | ALAS2023-2025-882 |
| Amazon Linux 2 | aws-cfn-bootstrap | 2.0-38.amzn2 | ALAS2-2025-3104 |
| Amazon Linux 2 | edk2-ovmf +3 | 20240813-298.amzn2 | ALAS2-2025-2750 |
| Amazon Linux 2 | openssl +4 | 1:1.0.2k-24.amzn2.0.15 | ALAS2-2025-2780 |
| Amazon Linux 2 | openssl11 +3 | 1:1.1.1zb-1.amzn2.0.1 | ALAS2-2025-2781 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | edk2 | 20240524git3e722403cd16-6 | — |
| Azure Linux 3 | openssl | 3.3.3-1 | — |
| Azure Linux 3 | openssl-fips-provider | No fix yet | — |
| Azure Linux 2 (CBL-Mariner) | openssl | 1.1.1k-36 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 10 | mysql-selinux | 1.0.14-1.el10_0 | ELSA-2025-15699 |
| Oracle Linux 10 | mysql8.4 +7 | 8.4.6-2.el10_0 | ELSA-2025-15699 |
| Oracle Linux 9 | mecab +1 | 0.996-3.module+el9.6.0+90535+0c73839a.4 | ELSA-2025-16046 |
| Oracle Linux 9 | mecab-ipadic +1 | 2.7.0.20070801-24.0.1.module+el9.6.0+90535+0c73839a | ELSA-2025-16046 |
| Oracle Linux 9 | mysql +7 | 8.4.6-1.module+el9.6.0+90673+e6b08fe8 | ELSA-2025-16046 |
| Oracle Linux 9 | rapidjson-doc +1 | 1.1.0-19.module+el9.6.0+90535+0c73839a | ELSA-2025-16046 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | openssl | 3.4.0-r6 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
GitHub 1 repository
-
Haomin-Yu/cve-2024-13176-timing-analysis ★ 0 · Aug 19, 2026
Instrumented analysis and reproducibility materials for ECDSA timing leakage in OpenSSL CVE-2024-13176
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 36
- USN-7894-1 edk2 vulnerabilities Ubuntu Security Notices (USN) · Nov 9, 2026
- USN-7278-1 openssl vulnerabilities Ubuntu Security Notices (USN) · Nov 9, 2026
- WID-SEC-2025-0813 Oracle MySQL: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 8, 2026
- ALSA-2025:16046 Moderate: mysql:8.4 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:15699 Moderate: mysql-selinux and mysql8.4 security update AlmaLinux Security Advisories · Oct 29, 2026
- SUSE-SU-2026:3835-1 Security update for openssl, openssl-3 SUSE / openSUSE Security Updates · Sep 10, 2026
- WID-SEC-2025-0131 OpenSSL: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Sep 3, 2026
- SUSE-SU-2025:20464-1 Security update for openssl-3 SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20233-1 Security update for openssl-3 SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:02042-1 Security update for openssl-3 SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20406-1 Security update for openssl-3 SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:0613-3 Security update for openssl-1_1 SUSE / openSUSE Security Updates · Mar 23, 2026
- DLA-4176-1 openssl - security update Debian Security (DSA / DLA) · Mar 9, 2026
- SUSE-SU-2025:0430-1 Security update for openssl-3 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:0390-1 Security update for openssl-1_1 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:0388-1 Security update for openssl-3 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:0345-1 Security update for openssl-1_1 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:0349-1 Security update for openssl-1_1 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:0387-1 Security update for openssl-3 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:0613-1 Security update for openssl-1_1 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:0356-1 Security update for openssl-1_1 SUSE / openSUSE Security Updates · Feb 4, 2026
- ALAS2-2025-3104 Moderate: aws-cfn-bootstrap security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Jan 5, 2026
- WID-SEC-2025-1850 Xerox FreeFlow Print Server: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff BSI CERT-Bund (WID) · Nov 17, 2025
- RLSA-2025:15699 Moderate: mysql-selinux and mysql8.4 security update Rocky Linux Security Advisories · Oct 8, 2025
- ELSA-2025-16046 Moderate: mysql:8.4 security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Sep 17, 2025
- ELSA-2025-15699 Moderate: mysql-selinux and mysql8.4 security update (Oracle Linux 10) Oracle Linux Security Advisories (ELSA) · Sep 11, 2025
- WID-SEC-2025-1568 Oracle JD Edwards: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 15, 2025
- WID-SEC-2025-0828 Oracle Database Server: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 19, 2025
- SUSE-SU-2025:0613-2 Security update for openssl-1_1 SUSE / openSUSE Security Updates · May 15, 2025
- openSUSE-SU-2025:14696-1 libopenssl-3-devel-3.2.3-4.1 on GA media SUSE / openSUSE Security Updates · May 7, 2025
- NCSC-2025-0132 Kwetsbaarheden verholpen in Oracle MySQL NCSC-NL (Netherlands) · Apr 16, 2025
- NCSC-2025-0123 Kwetsbaarheden verholpen in Oracle Database Producten NCSC-NL (Netherlands) · Apr 16, 2025
- ALAS2-2025-2780 Moderate: openssl security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Mar 7, 2025
- ALAS2-2025-2781 Moderate: openssl11 security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Mar 7, 2025
- ALAS2023-2025-882 Moderate: openssl security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Mar 5, 2025
- ALAS2-2025-2750 Moderate: edk2 security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Feb 4, 2025
References
- OpenSSL Advisory vendor-advisory
- 3.4.1 git commit patch
- 3.3.3 git commit patch
- 3.2.4 git commit patch
- 3.1.8 git commit patch
- 3.0.16 git commit patch
- 1.1.1zb git commit patch
- 1.0.2zl git commit patch