Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation. Impact summary: A timing side-channel in ECDSA signature computations could allow recovering the private key by an attacker. However, measuring the timing would require either local access to the signing application or a very fast network connection with low latency. There is a timing signal of around 300 nanoseconds when the top word of the inverted ECDSA nonce value is zero. This can happen with significant probability only for some of the supported elliptic curves. In particular the NIST P-521 curve is affected. To be able to measure this leak, the attacker process must either be located in the same physical computer or must have a very fast network connection with low latency. For that reason the severity of this vulnerability is Low.

amazon_alas ALAS2-2025-2781: Amazon Linux 2 Security Advisory:ALAS-2025-2781

amazon_alas ALAS2-2025-2780: Amazon Linux 2 Security Advisory:ALAS-2025-2780

The version of openssl-snapsafe installed on the remote host is prior to 1.0.2k-24. It is, therefore, affected by a vulnerability as referenced in the ALAS2OPENSSL-SNAPSAFE-2025-007 advisory.

    Issue summary: A timing side-channel which could potentially allow recoveringthe private key exists in the     ECDSA signature computation.

    Impact summary: A timing side-channel in ECDSA signature computationscould allow recovering the private     key by an attacker. However, measuringthe timing would require either local access to the signing     application ora very fast network connection with low latency.

    There is a timing signal of around 300 nanoseconds when the top word ofthe inverted ECDSA nonce value is     zero. This can happen with significantprobability only for some of the supported elliptic curves. In     particularthe NIST P-521 curve is affected. To be able to measure this leak, the attackerprocess must     either be located in the same physical computer or musthave a very fast network connection with low     latency. For that reasonthe severity of this vulnerability is Low. (CVE-2024-13176)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Issue summary: A timing side-channel which could potentially allow recovering the private key exists in     the ECDSA signature computation. Impact summary: A timing side-channel in ECDSA signature computations     could allow recovering the private key by an attacker. However, measuring the timing would require either     local access to the signing application or a very fast network connection with low latency. There is a     timing signal of around 300 nanoseconds when the top word of the inverted ECDSA nonce value is zero. This     can happen with significant probability only for some of the supported elliptic curves. In particular the     NIST P-521 curve is affected. To be able to measure this leak, the attacker process must either be located     in the same physical computer or must have a very fast network connection with low latency. For that     reason the severity of this vulnerability is Low. (CVE-2024-13176)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0613-1 advisory.

    - CVE-2024-13176: Fixed timing side-channel in the ECDSA signature computation (bsc#1236136).

    Other bugfixes:

    - Non approved PBKDF parameters wrongly resulting as approved (bsc#1236771).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7278-1 advisory.

    George Pantelakis and Alicja Kario discovered that OpenSSL had a timing side-channel when performing ECDSA     signature computations. A remote attacker could possibly use this issue to recover private data.
    (CVE-2024-13176)

    It was discovered that OpenSSL incorrectly handled certain memory operations when using low-level GF(2^m)     elliptic curve APIs with untrusted explicit values for the field polynomial. When being used in this     uncommon fashion, a remote attacker could use this issue to cause OpenSSL to crash, resulting in a denial     of service, or possibly execute arbitrary code. (CVE-2024-9143)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0430-1 advisory.

    - CVE-2024-13176: Fixed timing side-channel in ECDSA signature computation (bsc#1236136).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:0390-1 advisory.

    - CVE-2024-13176: Fixed timing side-channel in the ECDSA signature computation (bsc#1236136)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 24.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7264-1 advisory.

    It was discovered that OpenSSL clients incorrectly handled authenticating servers using RFC7250 Raw Public     Keys. In certain cases, the connection will not abort as expected, possibly causing the communication to     be intercepted. (CVE-2024-12797)

    George Pantelakis and Alicja Kario discovered that OpenSSL had a timing side-channel when performing ECDSA     signature computations. A remote attacker could possibly use this issue to recover private data.
    (CVE-2024-13176)

    It was discovered that OpenSSL incorrectly handled certain memory operations when using low-level GF(2^m)     elliptic curve APIs with untrusted explicit values for the field polynomial. When being used in this     uncommon fashion, a remote attacker could use this issue to cause OpenSSL to crash, resulting in a denial     of service, or possibly execute arbitrary code. (CVE-2024-9143)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0356-1 advisory.

    - CVE-2024-13176: Fixed timing side-channel in the ECDSA signature computation (bsc#1236136)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0388-1 advisory.

    - CVE-2024-13176: Fixed timing side-channel in ECDSA signature computation (bsc#1236136).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0387-1 advisory.

    - CVE-2024-13176: Fixed timing side-channel in ECDSA signature computation (bsc#1236136).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0349-1 advisory.

    - CVE-2024-13176: Fixed timing side-channel in the ECDSA signature computation (bsc#1236136)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of openssl installed on the remote host is prior to 1.1.1zb_p2. It is, therefore, affected by a vulnerability as referenced in the SSA:2025-040-01 advisory.

    New openssl packages are available for Slackware 15.0 and -current to fix a security issue.

Tenable has extracted the preceding description block directly from the openssl security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2750 advisory.

    Issue summary: A timing side-channel which could potentially allow recoveringthe private key exists in the     ECDSA signature computation.

    Impact summary: A timing side-channel in ECDSA signature computationscould allow recovering the private     key by an attacker. However, measuringthe timing would require either local access to the signing     application ora very fast network connection with low latency.

    There is a timing signal of around 300 nanoseconds when the top word ofthe inverted ECDSA nonce value is     zero. This can happen with significantprobability only for some of the supported elliptic curves. In     particularthe NIST P-521 curve is affected. To be able to measure this leak, the attackerprocess must     either be located in the same physical computer or musthave a very fast network connection with low     latency. For that reasonthe severity of this vulnerability is Low. (CVE-2024-13176)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
232227	Amazon Linux 2 : openssl-snapsafe (ALASOPENSSL-SNAPSAFE-2025-007)	Nessus	Amazon Linux Local Security Checks	medium
228225	Linux Distros Unpatched Vulnerability : CVE-2024-13176	Nessus	Misc.	medium
216654	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : openssl-1_1 (SUSE-SU-2025:0613-1)	Nessus	SuSE Local Security Checks	medium
216593	Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS : OpenSSL vulnerabilities (USN-7278-1)	Nessus	Ubuntu Local Security Checks	high
216210	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : openssl-3 (SUSE-SU-2025:0430-1)	Nessus	SuSE Local Security Checks	medium
216201	SUSE SLES12 Security Update : openssl-1_1 (SUSE-SU-2025:0390-1)	Nessus	SuSE Local Security Checks	medium
216159	Ubuntu 24.10 : OpenSSL vulnerabilities (USN-7264-1)	Nessus	Ubuntu Local Security Checks	high
215183	SUSE SLES15 Security Update : openssl-1_1 (SUSE-SU-2025:0356-1)	Nessus	SuSE Local Security Checks	medium
215173	SUSE SLES15 Security Update : openssl-3 (SUSE-SU-2025:0388-1)	Nessus	SuSE Local Security Checks	medium
215166	SUSE SLES15 Security Update : openssl-3 (SUSE-SU-2025:0387-1)	Nessus	SuSE Local Security Checks	medium
215165	SUSE SLES15 Security Update : openssl-1_1 (SUSE-SU-2025:0349-1)	Nessus	SuSE Local Security Checks	medium
215164	Slackware Linux 15.0 / current openssl Vulnerability (SSA:2025-040-01)	Nessus	Slackware Local Security Checks	medium
214984	Amazon Linux 2 : edk2 (ALAS-2025-2750)	Nessus	Amazon Linux Local Security Checks	medium

Detections

Analytics

CVE-2024-13176

medium

Tenable Plugins

Coming Soon

medium

medium

medium

high

medium

medium

high

medium

medium

medium

medium

medium

medium