PT-2025-22575 · 'Русбитех Астра'+6 · Astra Linux Special Edition+18

Publicado 2025-01-20 · Atualizado 2025-01-20 · CVE-2024-131767238

BDU

CVSS v2.0

4.3

Média

Vetor base

AV:L/AC:L/Au:S/C:P/I:P/A:P

Уязвимость библиотеки OpenSSL связана со cкрытым временным каналом. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, восстановить закрытый ключ

Correção

Enumeração de Fraquezas

CWE-385

Identificadores relacionados

BDU:2025-03280

CVE-2024-131767238

Produtos afetados

Astra Linux Special Edition

Debian

Openssl

Opensuse Leap

Suse Enterprise Storage

Suse Linux Enterprise High Performance Computing

Suse Linux Enterprise Micro

Suse Linux Enterprise Module For Basesystem

Suse Linux Enterprise Module For Development Tools

Suse Linux Enterprise Module For Legacy

Suse Linux Enterprise Server For Sap Applications

Suse Manager Proxy

Suse Manager Retail Branch Server

Suse Manager Server

Suse Linux Enterprise Desktop

Suse Linux Enterprise Server

Осон Основа Оnyx

Пак Кцпс

Red Os

Referências · 17

• https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844 · Nota
• https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467 · Nota
• https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902 · Nota
• https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65 · Nota
• https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f · Nota
• https://altsp.su/obnovleniya-bezopasnosti · Nota
• https://xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/3.1 · Nota
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0923SE17 · Aviso do Fabricante
• https://xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.14 · Nota
• https://redos.red-soft.ru/support/secure/uyazvimosti/uyazvimost-openssl-cve-2024-131767238/?sphrase_id=810704 · Nota
• https://security-tracker.debian.org/tracker/CVE-2024-13176 · Aviso do Fabricante
• https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86 · Nota
• https://suse.com/security/cve/CVE-2024-13176.html · Nota
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2025-1020SE47 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2025-03280 · Nota de Segurança