CVE-2024-45191
CVSS Score
5.3
EPSS Score
0.0%
EPSS Percentile
0th
An issue was discovered in Matrix libolm through 3.2.16. The AES implementation is vulnerable to cache-timing attacks due to use of S-boxes. This is related to software that uses a lookup table for the SubWord step. This refers to the libolm implementation of Olm. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
| Vendor | n/a |
| Product | n/a |
| Published | Aug 22, 2024 |
| Last Updated | Sep 10, 2024 |
Stay Ahead of the Next One
Get instant alerts for n/a n/a
Be the first to know when new medium vulnerabilities affecting n/a n/a are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
n/a / n/a
n/a
References
soatok.blog: https://soatok.blog/2024/08/14/security-issues-in-matrixs-olm-library/ gitlab.matrix.org: https://gitlab.matrix.org/matrix-org/olm/ news.ycombinator.com: https://news.ycombinator.com/item?id=41249371 gitlab.matrix.org: https://gitlab.matrix.org/matrix-org/olm/-/commit/6d4b5b07887821a95b144091c8497d09d377f985