https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 11:29:28 +0000 https://cve.radiocsirt.org/vuln/alsa-2024:1239 <p><strong>Affected:</strong> AlmaLinux:9: opencryptoki, AlmaLinux:9: opencryptoki-ccatok, AlmaLinux:9: opencryptoki-devel, AlmaLinux:9: opencryptoki-ep11tok, AlmaLinux:9: opencryptoki-icatok, AlmaLinux:9: opencryptoki-icsftok, AlmaLinux:9: opencryptoki-libs, AlmaLinux:9: opencryptoki-swtok</p> <p>The opencryptoki packages contain version 2.11 of the PKCS#11 API, implemented for IBM Cryptocards, such as IBM 4764 and 4765 crypto cards. These packages includes support for the IBM 4758 Cryptographic CoProcessor (with the PKCS#11 firmware loaded), the IBM eServer Cryptographic Accelerator (FC 4960 on IBM eServer System p), the IBM Crypto Express2 (FC 0863 or FC 0870 on IBM System z), and the IBM CP Assist for Cryptographic Function (FC 3863 on IBM System z). The opencryptoki packages also bring a software token implementation that can be used without any cryptographic hardware. These packages contain the Slot Daemon (pkcsslotd) and general utilities.</p> <p>Security Fix(es):</p> <p>* opencryptoki: timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin) (CVE-2024-0914)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: opencryptoki, AlmaLinux:9: opencryptoki-ccatok, AlmaLinux:9: opencryptoki-devel, AlmaLinux:9: opencryptoki-ep11tok, AlmaLinux:9: opencryptoki-icatok, AlmaLinux:9: opencryptoki-icsftok, AlmaLinux:9: opencryptoki-libs, AlmaLinux:9: opencryptoki-swtok</p> <p>The opencryptoki packages contain version 2.11 of the PKCS#11 API, implemented for IBM Cryptocards, such as IBM 4764 and 4765 crypto cards. These packages includes support for the IBM 4758 Cryptographic CoProcessor (with the PKCS#11 firmware loaded), the IBM eServer Cryptographic Accelerator (FC 4960 on IBM eServer System p), the IBM Crypto Express2 (FC 0863 or FC 0870 on IBM System z), and the IBM CP Assist for Cryptographic Function (FC 3863 on IBM System z). The opencryptoki packages also bring a software token implementation that can be used without any cryptographic hardware. These packages contain the Slot Daemon (pkcsslotd) and general utilities.</p> <p>Security Fix(es):</p> <p>* opencryptoki: timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin) (CVE-2024-0914)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2024:1239 https://cve.radiocsirt.org/vuln/bdu:2024-02839 bdu:2024-02839 https://cve.radiocsirt.org/vuln/bdu:2024-02839 https://cve.radiocsirt.org/vuln/euvd-2026-277084 EUVD-2026-277084 https://cve.radiocsirt.org/vuln/euvd-2026-277084 https://cve.radiocsirt.org/vuln/fkie_cve-2024-0914 <p>A timing side-channel vulnerability has been discovered in the opencryptoki package while processing RSA PKCS#1 v1.5 padded ciphertexts. This flaw could potentially enable unauthorized RSA ciphertext decryption or signing, even without access to the corresponding private key.</p> <p>A timing side-channel vulnerability has been discovered in the opencryptoki package while processing RSA PKCS#1 v1.5 padded ciphertexts. This flaw could potentially enable unauthorized RSA ciphertext decryption or signing, even without access to the corresponding private key.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-0914 https://cve.radiocsirt.org/vuln/ghsa-qghg-5fph-q28c <p>A timing side-channel vulnerability has been discovered in the opencryptoki package while processing RSA PKCS#1 v1.5 padded ciphertexts. This flaw could potentially enable unauthorized RSA ciphertext decryption or signing, even without access to the corresponding private key.</p> <p>A timing side-channel vulnerability has been discovered in the opencryptoki package while processing RSA PKCS#1 v1.5 padded ciphertexts. This flaw could potentially enable unauthorized RSA ciphertext decryption or signing, even without access to the corresponding private key.</p> https://cve.radiocsirt.org/vuln/ghsa-qghg-5fph-q28c https://cve.radiocsirt.org/vuln/gsd-2024-0914 gsd-2024-0914 https://cve.radiocsirt.org/vuln/gsd-2024-0914 https://cve.radiocsirt.org/vuln/msrc_cve-2024-0914 msrc_CVE-2024-0914 https://cve.radiocsirt.org/vuln/msrc_cve-2024-0914 https://cve.radiocsirt.org/vuln/oesa-2026-1381 <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: opencryptoki</p> <p>openCryptoki is an implementation of the PKCS #11 API that allows interfacing to devices that hold cryptographic information and perform cryptographic functions. openCryptoki provides application portability by isolating the application from the details of the cryptographic device. Isolating the application also provides an added level of security. The openCryptoki API provides a standard programming interface between applications and all kinds of portable cryptographic devices. Security Fix(es):</p> <p>A timing side-channel vulnerability has been discovered in the opencryptoki package while processing RSA PKCS#1 v1.5 padded ciphertexts. This flaw could potentially enable unauthorized RSA ciphertext decryption or signing, even without access to the corresponding private key.(CVE-2024-0914)</p> <p>openCryptoki is a PKCS#11 library and tools for Linux and AIX. In 3.25.0 and 3.26.0, there is a heap buffer overflow vulnerability in the CKM_ECDH_AES_KEY_WRAP implementation allows an attacker with local access to cause out-of-bounds writes in the host process by supplying a compressed EC public key and invoking C_WrapKey. This can lead to heap corruption, or denial-of-service.(CVE-2026-22791)</p> <p>openCryptoki is a PKCS#11 library and provides tooling for Linux and AIX. Versions 2.3.2 and above are vulnerable to symlink-following when running in privileged contexts. A token-group user can redirect file operations to arbitrary filesystem targets by planting symlinks in group-writable token dire…</p> <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: opencryptoki</p> <p>openCryptoki is an implementation of the PKCS #11 API that allows interfacing to devices that hold cryptographic information and perform cryptographic functions. openCryptoki provides application portability by isolating the application from the details of the cryptographic device. Isolating the application also provides an added level of security. The openCryptoki API provides a standard programming interface between applications and all kinds of portable cryptographic devices. Security Fix(es):</p> <p>A timing side-channel vulnerability has been discovered in the opencryptoki package while processing RSA PKCS#1 v1.5 padded ciphertexts. This flaw could potentially enable unauthorized RSA ciphertext decryption or signing, even without access to the corresponding private key.(CVE-2024-0914)</p> <p>openCryptoki is a PKCS#11 library and tools for Linux and AIX. In 3.25.0 and 3.26.0, there is a heap buffer overflow vulnerability in the CKM_ECDH_AES_KEY_WRAP implementation allows an attacker with local access to cause out-of-bounds writes in the host process by supplying a compressed EC public key and invoking C_WrapKey. This can lead to heap corruption, or denial-of-service.(CVE-2026-22791)</p> <p>openCryptoki is a PKCS#11 library and provides tooling for Linux and AIX. Versions 2.3.2 and above are vulnerable to symlink-following when running in privileged contexts. A token-group user can redirect file operations to arbitrary filesystem targets by planting symlinks in group-writable token dire…</p> https://cve.radiocsirt.org/vuln/oesa-2026-1381 https://cve.radiocsirt.org/vuln/opensuse-su-2024:14195-1 <p>openCryptoki-3.23.0-4.1 on GA media</p> <p>openCryptoki-3.23.0-4.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:14195-1 https://cve.radiocsirt.org/vuln/rhsa-2024:1411 <p>opencryptoki: timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin)</p> <p>opencryptoki: timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin)</p> https://cve.radiocsirt.org/vuln/rhsa-2024:1411 https://cve.radiocsirt.org/vuln/suse-su-2024:1447-1 <p>Security update for openCryptoki</p> <p>Security update for openCryptoki</p> https://cve.radiocsirt.org/vuln/suse-su-2024:1447-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-0914 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: opencryptoki, Ubuntu:18.04:LTS: opencryptoki, Ubuntu:20.04:LTS: opencryptoki, Ubuntu:22.04:LTS: opencryptoki, Ubuntu:24.04:LTS: opencryptoki, Ubuntu:25.10: opencryptoki, Ubuntu:26.04:LTS: opencryptoki</p> <p>A timing side-channel vulnerability has been discovered in the opencryptoki package while processing RSA PKCS#1 v1.5 padded ciphertexts. This flaw could potentially enable unauthorized RSA ciphertext decryption or signing, even without access to the corresponding private key.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: opencryptoki, Ubuntu:18.04:LTS: opencryptoki, Ubuntu:20.04:LTS: opencryptoki, Ubuntu:22.04:LTS: opencryptoki, Ubuntu:24.04:LTS: opencryptoki, Ubuntu:25.10: opencryptoki, Ubuntu:26.04:LTS: opencryptoki</p> <p>A timing side-channel vulnerability has been discovered in the opencryptoki package while processing RSA PKCS#1 v1.5 padded ciphertexts. This flaw could potentially enable unauthorized RSA ciphertext decryption or signing, even without access to the corresponding private key.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-0914 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0582 <p>Ein Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux im Paket &#34;opencryptoki&#34; ausnutzen, um kryptografische Sicherheitsmechanismen zu umgehen.</p> <p>Ein Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux im Paket &#34;opencryptoki&#34; ausnutzen, um kryptografische Sicherheitsmechanismen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0582