Bug 2269723 (CVE-2024-3296)

Summary:	CVE-2024-3296 rust-openssl: timing based side-channel can lead to a Bleichenbacher style attack
Product:	[Other] Security Response	Reporter:	Robb Gatica <rgatica>
Component:	vulnerability	Assignee:	Product Security <prodsec-ir-bot>
Status:	NEW ---	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	spichugi
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:	A timing-based side-channel flaw exists in the rust-openssl package, which could be sufficient to recover a plaintext across a network in a Bleichenbacher-style attack. To achieve successful decryption, an attacker would have to be able to send a large number of trial messages for decryption. The vulnerability affects the legacy PKCS#1v1.5 RSA encryption padding mode.	Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	2269725
Bug Blocks:	2269720

Description Robb Gatica 2024-03-15 16:51:20 UTC

Description:
A timing based side-channel exists in the rust-openssl package which could be sufficient to recover a plaintext across a network in
a Bleichenbacher style attack. To achieve successful decryption an attacker would have to be able to send a large number of trial messages for
decryption. The vulnerability affects the legacy PKCS#1v1.5 RSA encryption padding mode.

References:
https://people.redhat.com/~hkario/marvin/
https://github.com/sfackler/rust-openssl/issues/2171

Comment 1 Robb Gatica 2024-03-15 17:12:35 UTC

Created rust-openssl tracking bugs for this issue:

Affects: fedora-all [bug 2269725]