CVE-2024-45191

An issue was discovered in Matrix libolm through 3.2.16. The AES implementation is vulnerable to cache-timing attacks due to use of S-boxes. This is r...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

An issue was discovered in Matrix libolm through 3.2.16. The AES implementation is vulnerable to cache-timing attacks due to use of S-boxes. This is related to software that uses a lookup table for the SubWord step. This refers to the libolm implementation of Olm. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

État des correctifs par distribution

Paquets corrigés publiés par chaque distribution pour cette CVE

Debian DEBIAN-CVE-2024-45191 olm
Ubuntu UBUNTU-CVE-2024-45191 olm

Références

advisory github.com
advisory nvd.nist.gov
package gitlab.matrix.org
patch gitlab.matrix.org
web news.ycombinator.com
web soatok.blog