{"id":"CVE-2024-3296","aliases":["EUVD-2024-31886","GHSA-w322-w9fv-rx3m","UBUNTU-CVE-2024-3296"],"status":"published","title":"Rust-openssl: timing based side-channel can lead to a bleichenbacher style attack","description":"A timing-based side-channel flaw exists in the rust-openssl package, which could be sufficient to recover a plaintext across a network in a Bleichenbacher-style attack. To achieve successful decryption, an attacker would have to be able to send a large number of trial messages for decryption. The vulnerability affects the legacy PKCS#1v1.5 RSA encryption padding mode.","severity":{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00415,"percentile":0.36131,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-203","CWE-208"],"published":"2024-04-04T13:47:24Z","modified":"2026-11-05T12:18:03Z","affected":[{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"rust-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.10.23-1","0.10.23-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"rust-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.10.29-1","0.10.36-1","0.10.36-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"rust-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.10.45-1","0.10.57-1","0.10.57-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"rust-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.10.70-1","0.10.72-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"rust-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.10.73-1","0.10.81-1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"rust-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.10.72-1","0.10.73-1"]}],"products":[{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"}],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2024-3296","tags":["vdb-entry","x_refsource_REDHAT","x_transferred","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2269723","tags":["issue-tracking","x_refsource_REDHAT","x_transferred","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-3296"},{"url":"https://github.com/advisories/GHSA-w322-w9fv-rx3m"},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-3296","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-3296","tags":["report"]},{"url":"https://github.com/sfackler/rust-openssl/issues/2171","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-3296","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2024-3296","title":"Rust-openssl: timing based side-channel can lead to a bleichenbacher style attack","description":"A timing-based side-channel flaw exists in the rust-openssl package, which could be sufficient to recover a plaintext across a network in a Bleichenbacher-style attack. To achieve successful decryption, an attacker would have to be able to send a large number of trial messages for decryption. The vulnerability affects the legacy PKCS#1v1.5 RSA encryption padding mode.","status":"published","published":"2024-04-04T13:47:24.183Z","modified":"2026-11-05T12:18:03.706Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-208"],"updated_at":"2026-11-05T16:36:33.176634Z"}],"euvd":[{"id":"EUVD-2024-31886","description":"A timing-based side-channel flaw exists in the rust-openssl package, which could be sufficient to recover a plaintext across a network in a Bleichenbacher-style attack. To achieve successful decryption, an attacker would have to be able to send a large number of trial messages for decryption. The vulnerability affects the legacy PKCS#1v1.5 RSA encryption padding mode.","status":"published","published":"2024-04-04T13:47:24Z","modified":"2026-11-05T12:18:03Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-05T13:14:14.11293Z"}],"ghsa":[{"id":"GHSA-w322-w9fv-rx3m","title":"A timing-based side-channel exists in the rust-openssl package, which could be sufficient to...","description":"A timing-based side-channel exists in the rust-openssl package, which could be sufficient to recover a plaintext across a network in a Bleichenbacher-style attack. To achieve successful decryption, an attacker would have to be able to send a large number of trial messages for decryption. The vulnerability affects the legacy PKCS#1v1.5 RSA encryption padding mode.","status":"published","published":"2024-04-04T15:30:34Z","modified":"2026-02-25T21:32:20Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-203","CWE-208"],"updated_at":"2026-11-02T15:06:22.774985Z"}],"nvd":[{"id":"CVE-2024-3296","description":"A timing-based side-channel flaw exists in the rust-openssl package, which could be sufficient to recover a plaintext across a network in a Bleichenbacher-style attack. To achieve successful decryption, an attacker would have to be able to send a large number of trial messages for decryption. The vulnerability affects the legacy PKCS#1v1.5 RSA encryption padding mode.","status":"published","published":"2024-04-04T14:15:11.08Z","modified":"2026-11-05T13:17:02.38Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-208"],"updated_at":"2026-11-05T19:55:48.976368Z"}],"osv":[{"id":"UBUNTU-CVE-2024-3296","description":"A timing-based side-channel flaw exists in the rust-openssl package, which could be sufficient to recover a plaintext across a network in a Bleichenbacher-style attack. To achieve successful decryption, an attacker would have to be able to send a large number of trial messages for decryption. The vulnerability affects the legacy PKCS#1v1.5 RSA encryption padding mode.","status":"published","published":"2024-04-04T14:15:00Z","modified":"2026-10-17T12:56:36.430340116Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T16:54:48.333535Z"},{"id":"CVE-2024-3296","description":"A timing-based side-channel flaw exists in the rust-openssl package, which could be sufficient to recover a plaintext across a network in a Bleichenbacher-style attack. To achieve successful decryption, an attacker would have to be able to send a large number of trial messages for decryption. The vulnerability affects the legacy PKCS#1v1.5 RSA encryption padding mode.","status":"withdrawn","published":"2024-04-04T14:15:11Z","modified":"2025-01-14T12:13:54.59588Z","updated_at":"2026-11-02T15:44:40.391953Z"}]}}