The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A timing side-channel vulnerability has been discovered in the opencryptoki package while processing RSA PKCS#1 v1.5 padded ciphertexts. This flaw could potentially enable unauthorized RSA ciphertext decryption or signing, even without access to the corresponding private key.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade opencryptoki-swtokUpgrade opencryptoki-tpmtokUpgrade opencryptoki-ep11tokUpgrade opencryptoki-ccatokUpgrade opencryptoki-icatokUpgrade opencryptokiUpgrade opencryptoki-libsUpgrade opencryptoki-icsftokUpgrade opencryptoki-devel | Mar 12, 2024 | Jan 31, 2024 |
| Debian | — | Upgrade opencryptoki | May 15, 2025 | Jan 31, 2024 |
| Ibm Aix | — | Apply the fix or workaround for opencryptoki_advisory | Jun 4, 2024 | Jan 31, 2024 |
| Oracle_linux | — | Upgrade opencryptoki-icsftokUpgrade opencryptoki-swtokUpgrade opencryptoki-libsUpgrade opencryptoki-tpmtokUpgrade opencryptokiUpgrade opencryptoki-devel | Mar 8, 2024 | Jan 25, 2024 |
| Redhat_linux | — | Upgrade opencryptoki-libs-debuginfoUpgrade opencryptoki-icatok-debuginfoUpgrade opencryptokiUpgrade opencryptoki-ccatok-debuginfoUpgrade opencryptoki-swtokUpgrade opencryptoki-libsUpgrade opencryptoki-swtok-debuginfoUpgrade opencryptoki-develUpgrade opencryptoki-icatokUpgrade opencryptoki-ep11tok-debuginfoUpgrade opencryptoki-tpmtok-debuginfoUpgrade opencryptoki-tpmtokUpgrade opencryptoki-icsftok-debuginfoUpgrade opencryptoki-debuginfoUpgrade opencryptoki-ep11tokUpgrade opencryptoki-icsftokUpgrade opencryptoki-ccatokNo solution existsUpgrade opencryptoki-debugsource | Mar 11, 2024 | Jan 31, 2024 |
| Rocky_linux | — | Upgrade opencryptokiUpgrade opencryptoki-develUpgrade opencryptoki-tpmtokUpgrade opencryptoki-swtokUpgrade opencryptoki-debugsourceUpgrade opencryptoki-debuginfoUpgrade opencryptoki-icsftok-debuginfoUpgrade opencryptoki-icsftokUpgrade opencryptoki-tpmtok-debuginfoUpgrade opencryptoki-libs-debuginfoUpgrade opencryptoki-libsUpgrade opencryptoki-swtok-debuginfo | Apr 8, 2024 | Jan 31, 2024 |
| Suse | — | Upgrade openCryptoki-64bitUpgrade openCryptokiUpgrade openCryptoki-32bitUpgrade openCryptoki-devel | Apr 29, 2024 | Jan 31, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub