CVE catalog

CVE-2024-13176

EDK II vulnerabilities

[CVE catalog]

Severity
Medium · CVSS 5.9CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Published
Source
[NVD] · [CVE record]
EPSS
0.61% · Oct 25, 2026

Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation. Impact summary: A timing side-channel in ECDSA signature computations could allow recovering the private key by an attacker. However, measuring the timing would require either local access to the signing application or a very fast network connection with low latency. There is a timing signal of around 300 nanoseconds when the top word of the inverted ECDSA nonce value is zero. This can happen with significant probability only for some of the supported elliptic curves. In particular the NIST P-521 curve is affected. To be able to measure this leak, the attacker process must either be located in the same physical computer or must have a very fast network connection with low latency. For that reason the severity of this vulnerability is Low. The FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianedk2sid2026.08+ds-2fixed
Debianedk2forky2026.08+ds-2fixed
Debianedk2trixie2025.02-8+deb13u1fixed
Debianedk2bookworm2022.11-6+deb12u2vulnerable
Debianedk2bookworm-security2022.11-6+deb12u1vulnerable
Debianopensslsid3.6.5-1fixed
Debianopensslforky3.6.5-1fixed
Debianopenssltrixie3.5.7-1~deb13u2fixed
Debianopenssltrixie-security3.5.7-1~deb13u3fixed
Debianopensslbookworm3.0.20-1~deb12u2fixed
Debianopensslbookworm-security3.0.22-1~deb12u2fixed
Ubuntuedk2nobleNot reportedvulnerable
Ubuntuopensslnoble3.0.16-1~deb12u1fixed
Ubuntuedk2noble2024.02-2ubuntu0.6fixed
Ubuntuefi-shell-aa64noble2024.02-2ubuntu0.6fixed
Ubuntuefi-shell-armnoble2024.02-2ubuntu0.6fixed
Ubuntuefi-shell-ia32noble2024.02-2ubuntu0.6fixed
Ubuntuefi-shell-riscv64noble2024.02-2ubuntu0.6fixed
Ubuntuefi-shell-x64noble2024.02-2ubuntu0.6fixed
Ubuntuovmfnoble2024.02-2ubuntu0.6fixed
Ubuntuovmf-ia32noble2024.02-2ubuntu0.6fixed
Ubuntuqemu-efi-aarch64noble2024.02-2ubuntu0.6fixed
Ubuntuqemu-efi-armnoble2024.02-2ubuntu0.6fixed
Ubuntuqemu-efi-riscv64noble2024.02-2ubuntu0.6fixed
Ubuntuopensslnoble3.0.13-0ubuntu3.5fixed
Ubuntulibssl-devnoble3.0.13-0ubuntu3.5fixed
Ubuntulibssl-docnoble3.0.13-0ubuntu3.5fixed
Ubuntulibssl3t64noble3.0.13-0ubuntu3.5fixed
Ubuntuopensslpro3.0.2-0ubuntu1.10+Fips1vulnerable
Ubuntuopensslpro3.0.2-0ubuntu1.12+Fips1vulnerable
Ubuntuopensslpro3.0.2-0ubuntu1.14+Fips1vulnerable
Ubuntuopensslpro3.0.2-0ubuntu1.15+Fips1vulnerable
Ubuntuopensslpro3.0.2-0ubuntu1.16+Fips1vulnerable
Ubuntuopensslpro3.0.2-0ubuntu1.17+Fips1vulnerable
Ubuntuopensslpro3.0.2-0ubuntu1.18+Fips1vulnerable
Ubuntuopensslpro3.0.2-0ubuntu1.19+Fips1fixed
Ubuntuedk2pro0~20190606.20d2e5a1-2ubuntu1vulnerable
Ubuntuedk2pro0~20190828.37eef910-3vulnerable
Ubuntuedk2pro0~20190828.37eef910-4vulnerable
Ubuntuedk2pro0~20191122.bd85bf54-1vulnerable
Ubuntuedk2pro0~20191122.bd85bf54-1ubuntu1vulnerable
Ubuntuedk2pro0~20191122.bd85bf54-2vulnerable
Ubuntuedk2pro0~20191122.bd85bf54-2ubuntu1vulnerable
Ubuntuedk2pro0~20191122.bd85bf54-2ubuntu2vulnerable
Ubuntuedk2pro0~20191122.bd85bf54-2ubuntu3vulnerable
Ubuntuedk2pro0~20191122.bd85bf54-2ubuntu3.1vulnerable
Ubuntuedk2pro0~20191122.bd85bf54-2ubuntu3.2vulnerable
Ubuntuedk2pro0~20191122.bd85bf54-2ubuntu3.3vulnerable
Ubuntuedk2pro0~20191122.bd85bf54-2ubuntu3.4vulnerable
Ubuntuedk2pro0~20191122.bd85bf54-2ubuntu3.5vulnerable
Ubuntuedk2pro0~20191122.bd85bf54-2ubuntu3.6vulnerable
Ubuntuedk2pro0~20191122.bd85bf54-2ubuntu3.6+esm1vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu2vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu3vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu4vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.1vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.2vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.3vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.4vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.5vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.6vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.7vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.8vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.9vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.10vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.11vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.12vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.13vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.13+esm1vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.13+esm2vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.13+esm3vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.13+esm4vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.13+esm5vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.13+esm6vulnerable
Ubuntuopenssl1.0pro1.0.2n-1ubuntu5.13+esm7vulnerable
Ubuntuopenssl20.041.1.1c-1ubuntu4vulnerable
Ubuntuopenssl20.041.1.1d-2ubuntu3vulnerable
Ubuntuopenssl20.041.1.1d-2ubuntu6vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu1vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.1vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.2vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.3vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.4vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.5vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.8vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.9vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.10vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.11vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.12vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.13vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.15vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.16vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.17vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.18vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.19vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.20vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.21vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.22vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.23vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.24fixed
Ubuntuedk222.042021.08~rc0-2vulnerable
Ubuntuedk222.042021.08-3vulnerable
Ubuntuedk222.042021.11~rc1-1vulnerable
Ubuntuedk222.042021.11-1vulnerable
Ubuntuedk222.042021.11-2vulnerable
Ubuntuedk222.042022.02~rc1-1vulnerable
Ubuntuedk222.042022.02~rc1-1ubuntu1vulnerable
Ubuntuedk222.042022.02-1vulnerable
Ubuntuedk222.042022.02-2vulnerable
Ubuntuedk222.042022.02-3vulnerable
Ubuntuedk222.042022.02-3ubuntu0.22.04.1vulnerable
Ubuntuedk222.042022.02-3ubuntu0.22.04.2vulnerable
Ubuntuedk222.042022.02-3ubuntu0.22.04.3vulnerable
Ubuntuedk222.042022.02-3ubuntu0.22.04.4fixed
Ubuntuopenssl22.041.1.1l-1ubuntu1vulnerable
Ubuntuopenssl22.043.0.0-1ubuntu1vulnerable
Ubuntuopenssl22.043.0.1-0ubuntu1vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.1vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.2vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.4vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.5vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.6vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.7vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.8vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.9vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.10vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.12vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.13vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.14vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.15vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.16vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.17vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.18vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.19fixed
Ubuntunodejspro12.22.5~dfsg-5ubuntu1vulnerable
Ubuntunodejspro12.22.7~dfsg-2ubuntu1vulnerable
Ubuntunodejspro12.22.7~dfsg-2ubuntu3vulnerable
Ubuntunodejspro12.22.9~dfsg-1ubuntu2vulnerable
Ubuntunodejspro12.22.9~dfsg-1ubuntu3vulnerable
Ubuntunodejspro12.22.9~dfsg-1ubuntu3.1vulnerable
Ubuntunodejspro12.22.9~dfsg-1ubuntu3.2vulnerable
Ubuntunodejspro12.22.9~dfsg-1ubuntu3.3vulnerable
Ubuntunodejspro12.22.9~dfsg-1ubuntu3.4vulnerable
Ubuntunodejspro12.22.9~dfsg-1ubuntu3.5vulnerable
Ubuntunodejspro12.22.9~dfsg-1ubuntu3.6vulnerable
Ubuntunodejspro12.22.9~dfsg-1ubuntu3.6+esm2vulnerable
Ubuntuopenssl-fipspro3.0.13-0ubuntu3+Fips1vulnerable
Ubuntuopenssl-fipspro3.0.13-0ubuntu3.6+Fips1fixed
Ubuntuedk224.042023.05-2vulnerable
Ubuntuedk224.042023.11-2vulnerable
Ubuntuedk224.042023.11-3vulnerable
Ubuntuedk224.042023.11-4vulnerable
Ubuntuedk224.042023.11-5vulnerable
Ubuntuedk224.042023.11-6vulnerable
Ubuntuedk224.042023.11-8vulnerable
Ubuntuedk224.042024.02-1vulnerable
Ubuntuedk224.042024.02-2vulnerable
Ubuntuedk224.042024.02-2ubuntu0.1vulnerable
Ubuntuedk224.042024.02-2ubuntu0.3vulnerable
Ubuntuedk224.042024.02-2ubuntu0.4vulnerable
Ubuntuedk224.042024.02-2ubuntu0.5vulnerable
Ubuntuedk224.042024.02-2ubuntu0.6fixed
Ubuntuopenssl24.043.0.10-1ubuntu2vulnerable
Ubuntuopenssl24.043.0.10-1ubuntu2.1vulnerable
Ubuntuopenssl24.043.0.10-1ubuntu3vulnerable
Ubuntuopenssl24.043.0.10-1ubuntu4vulnerable
Ubuntuopenssl24.043.0.13-0ubuntu2vulnerable
Ubuntuopenssl24.043.0.13-0ubuntu3vulnerable
Ubuntuopenssl24.043.0.13-0ubuntu3.1vulnerable
Ubuntuopenssl24.043.0.13-0ubuntu3.2vulnerable
Ubuntuopenssl24.043.0.13-0ubuntu3.3vulnerable
Ubuntuopenssl24.043.0.13-0ubuntu3.4vulnerable
Ubuntuopenssl24.043.0.13-0ubuntu3.5fixed
Ubuntuedk225.102025.02-3ubuntu2vulnerable
Ubuntuedk225.102025.02-8vulnerable
Ubuntuedk225.102025.02-8ubuntu1vulnerable
Ubuntuedk225.102025.02-8ubuntu2vulnerable
Ubuntuedk225.102025.02-8ubuntu3fixed
Ubuntuedk226.042025.02-8ubuntu3fixed
Alpineopenssl3.173.0.19-r0fixed
Alpineopenssl3.183.1.8-r0fixed
Alpineopenssl3.193.1.8-r0fixed
Alpineopenssl3.203.3.2-r2fixed
Alpineopenssl3.213.3.2-r5fixed
Alpineopenssl3.223.3.2-r5fixed
Alpineopenssl3.233.3.2-r5fixed
Alpineopenssl3.243.3.2-r5fixed
Suseopenssllinux enterprise module for basesystem 15 sp73.5.0-150700.3.4.1fixed
Suseopenssl-3linux enterprise module for basesystem 15 sp73.5.0-150700.5.45.2fixed
Susenodejs24linux enterprise module for web and scripting 15 sp724.18.1-150700.15.18.1fixed
Ubuntuopenssl20.041.1.1c-1ubuntu4vulnerable
Ubuntuopenssl20.041.1.1d-2ubuntu3vulnerable
Ubuntuopenssl20.041.1.1d-2ubuntu6vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu1vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.1vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.2vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.3vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.4vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.5vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.8vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.9vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.10vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.11vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.12vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.13vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.15vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.16vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.17vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.18vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.19vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.20vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.21vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.22vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.23vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.24fixed
Ubuntuopenssl22.041.1.1l-1ubuntu1vulnerable
Ubuntuopenssl22.043.0.0-1ubuntu1vulnerable
Ubuntuopenssl22.043.0.1-0ubuntu1vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.1vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.2vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.4vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.5vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.6vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.7vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.8vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.9vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.10vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.12vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.13vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.14vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.15vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.16vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.17vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.18vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.19fixed
Ubuntuopenssl24.043.0.10-1ubuntu2vulnerable
Ubuntuopenssl24.043.0.10-1ubuntu2.1vulnerable
Ubuntuopenssl24.043.0.10-1ubuntu3vulnerable
Ubuntuopenssl24.043.0.10-1ubuntu4vulnerable
Ubuntuopenssl24.043.0.13-0ubuntu2vulnerable
Ubuntuopenssl24.043.0.13-0ubuntu3vulnerable
Ubuntuopenssl24.043.0.13-0ubuntu3.1vulnerable
Ubuntuopenssl24.043.0.13-0ubuntu3.2vulnerable
Ubuntuopenssl24.043.0.13-0ubuntu3.3vulnerable
Ubuntuopenssl24.043.0.13-0ubuntu3.4vulnerable
Ubuntuopenssl24.043.0.13-0ubuntu3.5fixed
Suseopenssl-3linux micro 6.03.1.4-9.1fixed
Suseopenssl-3linux micro 6.13.1.4-slfo.1.1_4.1fixed
Suseopenssl-3linux micro 6.03.1.4-8.1fixed
Suseopenssl-1_1linux enterprise module for certifications 15 sp71.1.1w-150600.5.12.2fixed
Suseopenssl-3linux enterprise module for basesystem 15 sp63.1.4-150600.5.24.1fixed
Opensuseopenssl-3leap 15.63.1.4-150600.5.24.1fixed
Suseopenssl-1_1linux enterprise server 12 sp5-ltss1.1.1d-2.116.1fixed
Suseopenssl-1_1linux enterprise server ltss extended security 12 sp51.1.1d-2.116.1fixed
Suseopenssl-3linux enterprise micro 5.33.0.8-150400.4.72.1fixed
Suseopenssl-3linux enterprise micro 5.43.0.8-150400.4.72.1fixed
Suseopenssl-3linux enterprise high performance computing 15 sp4-espos3.0.8-150400.4.72.1fixed
Suseopenssl-3linux enterprise high performance computing 15 sp4-ltss3.0.8-150400.4.72.1fixed
Suseopenssl-3linux enterprise server 15 sp4-ltss3.0.8-150400.4.72.1fixed
Suseopenssl-3linux enterprise server for sap applications 15 sp43.0.8-150400.4.72.1fixed
Suseopenssl-3manager proxy 4.33.0.8-150400.4.72.1fixed
Suseopenssl-3manager server 4.33.0.8-150400.4.72.1fixed
Suseopenssl-1_1linux enterprise micro 5.51.1.1l-150500.17.40.1fixed
Suseopenssl-1_1linux enterprise high performance computing 15 sp5-espos1.1.1l-150500.17.40.1fixed
Suseopenssl-1_1linux enterprise high performance computing 15 sp5-ltss1.1.1l-150500.17.40.1fixed
Suseopenssl-1_1linux enterprise server 15 sp5-ltss1.1.1l-150500.17.40.1fixed
Suseopenssl-1_1linux enterprise server for sap applications 15 sp51.1.1l-150500.17.40.1fixed
Suseopenssl-1_1linux enterprise micro 5.31.1.1l-150400.7.78.1fixed
Suseopenssl-1_1linux enterprise micro 5.41.1.1l-150400.7.78.1fixed
Suseopenssl-1_1linux enterprise high performance computing 15 sp4-espos1.1.1l-150400.7.78.1fixed
Suseopenssl-1_1linux enterprise high performance computing 15 sp4-ltss1.1.1l-150400.7.78.1fixed
Suseopenssl-1_1linux enterprise server 15 sp4-ltss1.1.1l-150400.7.78.1fixed
Suseopenssl-1_1linux enterprise server for sap applications 15 sp41.1.1l-150400.7.78.1fixed
Suseopenssl-1_1manager proxy 4.31.1.1l-150400.7.78.1fixed
Suseopenssl-1_1manager server 4.31.1.1l-150400.7.78.1fixed
Suseopenssl-3linux enterprise high performance computing 15 sp5-espos3.0.8-150500.5.51.1fixed
Suseopenssl-3linux enterprise high performance computing 15 sp5-ltss3.0.8-150500.5.51.1fixed
Suseopenssl-3linux enterprise server 15 sp5-ltss3.0.8-150500.5.51.1fixed
Suseopenssl-3linux enterprise server for sap applications 15 sp53.0.8-150500.5.51.1fixed
Suseopenssl-1_1linux enterprise module for basesystem 15 sp61.1.1w-150600.5.12.2fixed
Suseopenssl-1_1linux enterprise module for development tools 15 sp61.1.1w-150600.5.12.2fixed
Suseopenssl-1_1linux enterprise module for legacy 15 sp61.1.1w-150600.5.12.2fixed
Opensuseopenssl-1_1leap 15.61.1.1w-150600.5.12.2fixed
Suseopenssl-1_1linux enterprise high performance computing 15 sp3-ltss1.1.1d-150200.11.100.1fixed
Suseopenssl-1_1linux enterprise server 15 sp3-ltss1.1.1d-150200.11.100.1fixed
Suseopenssl-1_1linux enterprise server for sap applications 15 sp31.1.1d-150200.11.100.1fixed
Suseopenssl-1_1linux enterprise micro 5.11.1.1d-150200.11.100.1fixed
Suseopenssl-1_1linux enterprise micro 5.21.1.1d-150200.11.100.1fixed
Suseopenssl-1_1enterprise storage 7.11.1.1d-150200.11.100.1fixed
Suseopenssl-1_1linux enterprise module for certifications 15 sp71.1.1w-150600.5.12.2fixed
Opensuseopenssl-3tumbleweed3.2.3-4.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianedk2sourcesid2025.02-9not yet assignedNot reportedNot reported
Debianedk2sourceforky2025.02-9not yet assignedNot reportedNot reported
Debianedk2sourcetrixie2025.02-8+deb13u1not yet assignedNot reportedNot reported
Debianedk2sourcebookworm(unfixed)not yet assignedNot reportedNot reported
Debianopensslsourcesid3.4.1-1not yet assignedNot reported[1094027]
Debianopensslsourceforky3.4.1-1not yet assignedNot reported[1094027]
Debianopensslsourcetrixie3.4.1-1not yet assignedNot reported[1094027]
Debianopensslsourcebookworm3.0.16-1~deb12u1not yet assignedNot reported[1094027]
Ubuntuopenssldebnoble3.0.16-1~deb12u1Not reportedNot reportedNot reported
Ubuntuedk2debnoble2024.02-2ubuntu0.6Not reportedNot reportedNot reported
Ubuntuefi-shell-aa64debnoble2024.02-2ubuntu0.6Not reportedNot reportedNot reported
Ubuntuefi-shell-armdebnoble2024.02-2ubuntu0.6Not reportedNot reportedNot reported
Ubuntuefi-shell-ia32debnoble2024.02-2ubuntu0.6Not reportedNot reportedNot reported
Ubuntuefi-shell-riscv64debnoble2024.02-2ubuntu0.6Not reportedNot reportedNot reported
Ubuntuefi-shell-x64debnoble2024.02-2ubuntu0.6Not reportedNot reportedNot reported
Ubuntuovmfdebnoble2024.02-2ubuntu0.6Not reportedNot reportedNot reported
Ubuntuovmf-ia32debnoble2024.02-2ubuntu0.6Not reportedNot reportedNot reported
Ubuntuqemu-efi-aarch64debnoble2024.02-2ubuntu0.6Not reportedNot reportedNot reported
Ubuntuqemu-efi-armdebnoble2024.02-2ubuntu0.6Not reportedNot reportedNot reported
Ubuntuqemu-efi-riscv64debnoble2024.02-2ubuntu0.6Not reportedNot reportedNot reported
Ubuntuopenssldebnoble3.0.13-0ubuntu3.5Not reportedNot reportedNot reported
Ubuntulibssl-devdebnoble3.0.13-0ubuntu3.5Not reportedNot reportedNot reported
Ubuntulibssl-docdebnoble3.0.13-0ubuntu3.5Not reportedNot reportedNot reported
Ubuntulibssl3t64debnoble3.0.13-0ubuntu3.5Not reportedNot reportedNot reported
Ubuntuopenssldebpro3.0.2-0ubuntu1.19+Fips1Not reportedUBUNTU-CVE-2024-13176Not reported
Ubuntuopenssldeb20.041.1.1f-1ubuntu2.24Not reportedUBUNTU-CVE-2024-13176Not reported
Ubuntuedk2deb22.042022.02-3ubuntu0.22.04.4Not reportedUBUNTU-CVE-2024-13176Not reported
Ubuntuopenssldeb22.043.0.2-0ubuntu1.19Not reportedUBUNTU-CVE-2024-13176Not reported
Ubuntuopenssl-fipsdebpro3.0.13-0ubuntu3.6+Fips1Not reportedUBUNTU-CVE-2024-13176Not reported
Ubuntuedk2deb24.042024.02-2ubuntu0.6Not reportedUBUNTU-CVE-2024-13176Not reported
Ubuntuopenssldeb24.043.0.13-0ubuntu3.5Not reportedUBUNTU-CVE-2024-13176Not reported
Ubuntuedk2deb25.102025.02-8ubuntu3Not reportedUBUNTU-CVE-2024-13176Not reported
Ubuntuedk2deb26.042025.02-8ubuntu3Not reportedUBUNTU-CVE-2024-13176Not reported
Alpineopensslapk3.173.0.19-r0Not reportedALPINE-CVE-2024-13176Not reported
Alpineopensslapk3.183.1.8-r0Not reportedALPINE-CVE-2024-13176Not reported
Alpineopensslapk3.193.1.8-r0Not reportedALPINE-CVE-2024-13176Not reported
Alpineopensslapk3.203.3.2-r2Not reportedALPINE-CVE-2024-13176Not reported
Alpineopensslapk3.213.3.2-r5Not reportedALPINE-CVE-2024-13176Not reported
Alpineopensslapk3.223.3.2-r5Not reportedALPINE-CVE-2024-13176Not reported
Alpineopensslapk3.233.3.2-r5Not reportedALPINE-CVE-2024-13176Not reported
Alpineopensslapk3.243.3.2-r5Not reportedALPINE-CVE-2024-13176Not reported
Suseopensslrpmlinux enterprise module for basesystem 15 sp73.5.0-150700.3.4.1Not reportedSUSE-SU-2026:3835-1Not reported
Suseopenssl-3rpmlinux enterprise module for basesystem 15 sp73.5.0-150700.5.45.2Not reportedSUSE-SU-2026:3835-1Not reported
Susenodejs24rpmlinux enterprise module for web and scripting 15 sp724.18.1-150700.15.18.1Not reportedSUSE-SU-2026:3835-1Not reported
Ubuntuopenssldeb20.041.1.1f-1ubuntu2.24Not reportedUSN-7278-1Not reported
Ubuntuopenssldeb22.043.0.2-0ubuntu1.19Not reportedUSN-7278-1Not reported
Ubuntuopenssldeb24.043.0.13-0ubuntu3.5Not reportedUSN-7278-1Not reported
Suseopenssl-3rpmlinux micro 6.03.1.4-9.1Not reportedSUSE-SU-2025:20464-1Not reported
Suseopenssl-3rpmlinux micro 6.13.1.4-slfo.1.1_4.1Not reportedSUSE-SU-2025:20233-1Not reported
Suseopenssl-3rpmlinux micro 6.03.1.4-8.1Not reportedSUSE-SU-2025:20406-1Not reported
Suseopenssl-1_1rpmlinux enterprise module for certifications 15 sp71.1.1w-150600.5.12.2Not reportedSUSE-SU-2025:0613-3Not reported
Suseopenssl-3rpmlinux enterprise module for basesystem 15 sp63.1.4-150600.5.24.1Not reportedSUSE-SU-2025:0430-1Not reported
Opensuseopenssl-3rpmleap 15.63.1.4-150600.5.24.1Not reportedSUSE-SU-2025:0430-1Not reported
Suseopenssl-1_1rpmlinux enterprise server 12 sp5-ltss1.1.1d-2.116.1Not reportedSUSE-SU-2025:0390-1Not reported
Suseopenssl-1_1rpmlinux enterprise server ltss extended security 12 sp51.1.1d-2.116.1Not reportedSUSE-SU-2025:0390-1Not reported
Suseopenssl-3rpmlinux enterprise micro 5.33.0.8-150400.4.72.1Not reportedSUSE-SU-2025:0388-1Not reported
Suseopenssl-3rpmlinux enterprise micro 5.43.0.8-150400.4.72.1Not reportedSUSE-SU-2025:0388-1Not reported
Suseopenssl-3rpmlinux enterprise high performance computing 15 sp4-espos3.0.8-150400.4.72.1Not reportedSUSE-SU-2025:0388-1Not reported
Suseopenssl-3rpmlinux enterprise high performance computing 15 sp4-ltss3.0.8-150400.4.72.1Not reportedSUSE-SU-2025:0388-1Not reported
Suseopenssl-3rpmlinux enterprise server 15 sp4-ltss3.0.8-150400.4.72.1Not reportedSUSE-SU-2025:0388-1Not reported
Suseopenssl-3rpmlinux enterprise server for sap applications 15 sp43.0.8-150400.4.72.1Not reportedSUSE-SU-2025:0388-1Not reported
Suseopenssl-3rpmmanager proxy 4.33.0.8-150400.4.72.1Not reportedSUSE-SU-2025:0388-1Not reported
Suseopenssl-3rpmmanager server 4.33.0.8-150400.4.72.1Not reportedSUSE-SU-2025:0388-1Not reported
Suseopenssl-1_1rpmlinux enterprise micro 5.51.1.1l-150500.17.40.1Not reportedSUSE-SU-2025:0345-1Not reported
Suseopenssl-1_1rpmlinux enterprise high performance computing 15 sp5-espos1.1.1l-150500.17.40.1Not reportedSUSE-SU-2025:0345-1Not reported
Suseopenssl-1_1rpmlinux enterprise high performance computing 15 sp5-ltss1.1.1l-150500.17.40.1Not reportedSUSE-SU-2025:0345-1Not reported
Suseopenssl-1_1rpmlinux enterprise server 15 sp5-ltss1.1.1l-150500.17.40.1Not reportedSUSE-SU-2025:0345-1Not reported
Suseopenssl-1_1rpmlinux enterprise server for sap applications 15 sp51.1.1l-150500.17.40.1Not reportedSUSE-SU-2025:0345-1Not reported
Suseopenssl-1_1rpmlinux enterprise micro 5.31.1.1l-150400.7.78.1Not reportedSUSE-SU-2025:0349-1Not reported
Suseopenssl-1_1rpmlinux enterprise micro 5.41.1.1l-150400.7.78.1Not reportedSUSE-SU-2025:0349-1Not reported
Suseopenssl-1_1rpmlinux enterprise high performance computing 15 sp4-espos1.1.1l-150400.7.78.1Not reportedSUSE-SU-2025:0349-1Not reported
Suseopenssl-1_1rpmlinux enterprise high performance computing 15 sp4-ltss1.1.1l-150400.7.78.1Not reportedSUSE-SU-2025:0349-1Not reported
Suseopenssl-1_1rpmlinux enterprise server 15 sp4-ltss1.1.1l-150400.7.78.1Not reportedSUSE-SU-2025:0349-1Not reported
Suseopenssl-1_1rpmlinux enterprise server for sap applications 15 sp41.1.1l-150400.7.78.1Not reportedSUSE-SU-2025:0349-1Not reported
Suseopenssl-1_1rpmmanager proxy 4.31.1.1l-150400.7.78.1Not reportedSUSE-SU-2025:0349-1Not reported
Suseopenssl-1_1rpmmanager server 4.31.1.1l-150400.7.78.1Not reportedSUSE-SU-2025:0349-1Not reported
Suseopenssl-3rpmlinux enterprise high performance computing 15 sp5-espos3.0.8-150500.5.51.1Not reportedSUSE-SU-2025:0387-1Not reported
Suseopenssl-3rpmlinux enterprise high performance computing 15 sp5-ltss3.0.8-150500.5.51.1Not reportedSUSE-SU-2025:0387-1Not reported
Suseopenssl-3rpmlinux enterprise server 15 sp5-ltss3.0.8-150500.5.51.1Not reportedSUSE-SU-2025:0387-1Not reported
Suseopenssl-3rpmlinux enterprise server for sap applications 15 sp53.0.8-150500.5.51.1Not reportedSUSE-SU-2025:0387-1Not reported
Suseopenssl-1_1rpmlinux enterprise module for basesystem 15 sp61.1.1w-150600.5.12.2Not reportedSUSE-SU-2025:0613-1Not reported
Suseopenssl-1_1rpmlinux enterprise module for development tools 15 sp61.1.1w-150600.5.12.2Not reportedSUSE-SU-2025:0613-1Not reported
Suseopenssl-1_1rpmlinux enterprise module for legacy 15 sp61.1.1w-150600.5.12.2Not reportedSUSE-SU-2025:0613-1Not reported
Opensuseopenssl-1_1rpmleap 15.61.1.1w-150600.5.12.2Not reportedSUSE-SU-2025:0613-1Not reported
Suseopenssl-1_1rpmlinux enterprise high performance computing 15 sp3-ltss1.1.1d-150200.11.100.1Not reportedSUSE-SU-2025:0356-1Not reported
Suseopenssl-1_1rpmlinux enterprise server 15 sp3-ltss1.1.1d-150200.11.100.1Not reportedSUSE-SU-2025:0356-1Not reported
Suseopenssl-1_1rpmlinux enterprise server for sap applications 15 sp31.1.1d-150200.11.100.1Not reportedSUSE-SU-2025:0356-1Not reported
Suseopenssl-1_1rpmlinux enterprise micro 5.11.1.1d-150200.11.100.1Not reportedSUSE-SU-2025:0356-1Not reported
Suseopenssl-1_1rpmlinux enterprise micro 5.21.1.1d-150200.11.100.1Not reportedSUSE-SU-2025:0356-1Not reported
Suseopenssl-1_1rpmenterprise storage 7.11.1.1d-150200.11.100.1Not reportedSUSE-SU-2025:0356-1Not reported
Suseopenssl-1_1rpmlinux enterprise module for certifications 15 sp71.1.1w-150600.5.12.2Not reportedSUSE-SU-2025:0613-2Not reported
Opensuseopenssl-3rpmtumbleweed3.2.3-4.1Not reportedOPENSUSE-SU-2025:14696-1Not reported

[Debian bug #1094027]

Notes

[bookworm] edk2: Minor issue

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]