CVE-2024-0914: Opencryptoki: timing side-channel in handling of rsa pkcs#1 v1.5 padded ciphertexts (marvin)
A timing side-channel vulnerability has been discovered in the opencryptoki package while processing RSA PKCS#1 v1.5 padded ciphertexts. This flaw could potentially enable unauthorized RSA ciphertext decryption or signing, even without access to the corresponding private key.
Other sources
Description: A timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts was discovered in the opencryptoki package. This side-channel can be used to perform RSA ciphertext decryption or signing without access to the private key. To achieve a successful decryption the attack would need to send a large amount of specifically crafted messages to a service that uses the vulnerable API.
Fixed in: No fixed-in version yet, but a new release is expected in the next 3 weeks or so. Patches are already merged though.
References: https://github.com/opencryptoki/opencryptoki/issues/731 https://github.com/opencryptoki/opencryptoki/pull/737 https://github.com/opencryptoki/opencryptoki/commit/2ea019ee2b09f15724d808382d53baca03403288 https://github.com/opencryptoki/opencryptoki/commit/7ffc0e135b4d923d686be536aa7bf69405a360a1 https://github.com/opencryptoki/opencryptoki/commit/c26e049bf40d656bc51429bad190b82fbf63f0c7 https://people.redhat.com/~hkario/marvin/
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/opencryptokito a version that resolves this vulnerability.Fixed in 3.23.0+dfsg-0.1 - Upgrade
Upgrade
debian/opencryptokito a version that resolves this vulnerability.Fixed in 3.23.0+dfsg-0.3+deb13u1Fixed in 3.27.0-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-0914?
CVE-2024-0914 is considered a high severity vulnerability due to its potential to enable unauthorized decrypted access to RSA ciphertext without a private key.
How do I fix CVE-2024-0914?
To mitigate CVE-2024-0914, upgrade to the latest version of Opencryptoki that is above version 3.23.0.
What platforms are affected by CVE-2024-0914?
CVE-2024-0914 affects Opencryptoki on versions lower than 3.23.0 and Red Hat Enterprise Linux versions 8.0 and 9.0.
What type of vulnerability is CVE-2024-0914?
CVE-2024-0914 is a timing side-channel vulnerability affecting RSA PKCS#1 v1.5 padded ciphertexts.
Can CVE-2024-0914 lead to data breaches?
Yes, CVE-2024-0914 can potentially enable unauthorized decryption of RSA ciphertext, which may lead to data breaches.