PT-2025-22575 · 'Русбитех Астра'+6 · Astra Linux Special Edition+18

Published 2025-01-20 · Updated 2025-01-20 · CVE-2024-131767238

BDU

CVSS v2.0

4.3

Medium

Base vector

AV:L/AC:L/Au:S/C:P/I:P/A:P

Уязвимость библиотеки OpenSSL связана со cкрытым временным каналом. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, восстановить закрытый ключ

Fix

Weakness Enumeration

CWE-385

Related Identifiers

BDU:2025-03280

CVE-2024-131767238

Affected Products

Astra Linux Special Edition

Debian

Openssl

Opensuse Leap

Suse Enterprise Storage

Suse Linux Enterprise High Performance Computing

Suse Linux Enterprise Micro

Suse Linux Enterprise Module For Basesystem

Suse Linux Enterprise Module For Development Tools

Suse Linux Enterprise Module For Legacy

Suse Linux Enterprise Server For Sap Applications

Suse Manager Proxy

Suse Manager Retail Branch Server

Suse Manager Server

Suse Linux Enterprise Desktop

Suse Linux Enterprise Server

Осон Основа Оnyx

Пак Кцпс

Red Os

References · 17

• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0923SE17 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2024-13176 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2025-1020SE47 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-03280 · Security Note
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2025-0411SE18 · Vendor Advisory
• https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844 · Note
• https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467 · Note
• https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902 · Note
• https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65 · Note
• https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f · Note
• https://altsp.su/obnovleniya-bezopasnosti · Note
• https://xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/3.1 · Note
• https://xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.14 · Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/uyazvimost-openssl-cve-2024-131767238/?sphrase_id=810704 · Note
• https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86 · Note