VDB
JLSEC-2026-248
JLSEC-2026-248
PUBLISHED
CVSS 4.099999904632568 MEDIUM
Issue summary: A timing side-channel which could potentially allow recovering the private key...
Risk Scores
CVSS 3.1
4.099999904632568
CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Julia | OpenSSL_jll | 0, 0 |
| Julia | Openresty_jll | 0, 0 |
Timeline
- Apr 27, 2026 CVE Published
- Apr 27, 2026 CVE Updated
References
- http://www.openwall.com/lists/oss-security/2025/01/20/2 url
- https://github.com/advisories/GHSA-r9fv-h47r-823f url
- https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844 url
- https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467 url
- https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902 url
- https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65 url
- https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f url
- https://github.openssl.org/openssl/extended-releases/commit/0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded url
- https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86 url
- https://lists.debian.org/debian-lts-announce/2025/05/msg00028.html url
- https://nvd.nist.gov/vuln/detail/CVE-2024-13176 url
- https://openssl-library.org/news/secadv/20250120.txt url
- https://security.netapp.com/advisory/ntap-20250124-0005 url
- https://security.netapp.com/advisory/ntap-20250124-0005/ url
- https://security.netapp.com/advisory/ntap-20250418-0010 url
- https://security.netapp.com/advisory/ntap-20250418-0010/ url
- https://security.netapp.com/advisory/ntap-20250502-0006 url
- https://security.netapp.com/advisory/ntap-20250502-0006/ url