CVE-2024-13176

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-13176
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-13176.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-13176
Downstream
ALPINE (1)
ALSA (2)
AZL (4)
BELL (1)
CGA (14)
CLSA (8)
DEBIAN (1)
ECHO (1)
JLSEC (1)
MGASA (3)
MINI (1)
OESA (7)
openSUSE (1)
RLSA (1)
SUSE (15)
UBUNTU (1)
Related
ALSA (2)
openSUSE (1)
SUSE (15)
USN (1)
Published
2025-01-20T13:29:57Z
Modified
2026-11-11T13:28:55Z
Severity
  • 4.6 (Medium) CVSS_V3 - CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
Timing side-channel in ECDSA signature computation
Details

Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation.

Impact summary: A timing side-channel in ECDSA signature computations could allow recovering the private key by an attacker. However, measuring the timing would require either local access to the signing application or a very fast network connection with low latency.

There is a timing signal of around 300 nanoseconds when the top word of the inverted ECDSA nonce value is zero. This can happen with significant probability only for some of the supported elliptic curves. In particular the NIST P-521 curve is affected. To be able to measure this leak, the attacker process must either be located in the same physical computer or must have a very fast network connection with low latency. For that reason the severity of this vulnerability is Low.

The FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.

Database specific 
{
    "cna_assigner": "openssl",
    "cwe_ids": [
        "CWE-385"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/13xxx/CVE-2024-13176.json"
}
References

Affected packages

Git / github.com/alsyundawy/openssl-1.0.2

Affected ranges

Type
GIT
Repo
https://github.com/alsyundawy/openssl-1.0.2
Events
Introduced
c46078156d49453ba69badc9addb1e2dcd1c71f5
Fixed
c46078156d49453ba69badc9addb1e2dcd1c71f5
Database specific
Show details 
{
    "extracted_events": [
        {
            "cpe": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "1.0.2"
                },
                {
                    "fixed": "1.0.2zl"
                }
            ],
            "source": "CPE_RANGE"
        }
    ]
}
Type
GIT
Repo
https://github.com/kzalewski/openssl-1.1.1
Events
Introduced
9ad69b994ae7c73ba06d9f75efd2625102de814c
Fixed
9ad69b994ae7c73ba06d9f75efd2625102de814c
Database specific
Show details 
{
    "extracted_events": [
        {
            "cpe": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "1.1.1"
                },
                {
                    "fixed": "1.1.1zb"
                }
            ],
            "source": "CPE_RANGE"
        }
    ]
}
Type
GIT
Repo
https://github.com/openssl/openssl
Events
Introduced
e818b74be2170fbe957a07b0da4401c2b694b3b8
Fixed
e818b74be2170fbe957a07b0da4401c2b694b3b8
Introduced
e04bd3433fd84e1861bf258ea37928d9845e6a86
Fixed
e04bd3433fd84e1861bf258ea37928d9845e6a86
Introduced
89cd17a031e022211684eb7eb41190cf1910f9fa
Fixed
fa1e5dfb142bb1c26c3c38a10aafa7a095df52e5
Introduced
a92271e03a8d0dee507b6f1e7f49512568b2c7ad
Fixed
77e6daafbad639584e1e4877172b3f9a777966dd
Introduced
cf2877791ce7508684109664f467c9e40987692f
Fixed
8ac4271233ecec5aa0468a5e7ae38dd642ebf365
Introduced
4cb31128b5790819dfeea2739fbde265f71a10a2
Fixed
42768eafab40d3e2f0851caa84aa9801139c74ab
Introduced
98acb6b02839c609ef5b837794e08d906d965335
Fixed
a26d85337dbdcd33c971f38eb3fa5150e75cea87
Fixed
07272b05b04836a762b4baa874958af51d513844
Fixed
2af62e74fb59bc469506bc37eb2990ea408d9467
Fixed
392dcb336405a0c94486aa6655057f59fd3a0902
Fixed
4b1cb94a734a7d4ec363ac0a215a25c181e11f65
Fixed
77c608f4c8857e63e98e66444e2e761c9627916f
Database specific
Show details 
{
    "extracted_events": [
        {
            "cpe": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "1.0.2"
                },
                {
                    "fixed": "1.0.2zl"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "1.1.1"
                },
                {
                    "fixed": "1.1.1zb"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "3.0.0"
                },
                {
                    "fixed": "3.0.16"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "3.1.0"
                },
                {
                    "fixed": "3.1.8"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "3.2.0"
                },
                {
                    "fixed": "3.2.4"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "3.3.0"
                },
                {
                    "fixed": "3.3.3"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "3.4.0"
                },
                {
                    "fixed": "3.4.1"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "range": [
                {
                    "fixed": "07272b05b04836a762b4baa874958af51d513844"
                }
            ],
            "source": "REFERENCES_COMMIT"
        },
        {
            "range": [
                {
                    "fixed": "2af62e74fb59bc469506bc37eb2990ea408d9467"
                }
            ],
            "source": "REFERENCES_COMMIT"
        },
        {
            "range": [
                {
                    "fixed": "392dcb336405a0c94486aa6655057f59fd3a0902"
                }
            ],
            "source": "REFERENCES_COMMIT"
        },
        {
            "range": [
                {
                    "fixed": "4b1cb94a734a7d4ec363ac0a215a25c181e11f65"
                }
            ],
            "source": "REFERENCES_COMMIT"
        },
        {
            "range": [
                {
                    "fixed": "77c608f4c8857e63e98e66444e2e761c9627916f"
                }
            ],
            "source": "REFERENCES_COMMIT"
        }
    ]
}

Affected versions

openssl-3.*
openssl-3.0.0
openssl-3.0.1
openssl-3.0.10
openssl-3.0.11
openssl-3.0.12
openssl-3.0.13
openssl-3.0.14
openssl-3.0.15
openssl-3.0.2
openssl-3.0.3
openssl-3.0.4
openssl-3.0.5
openssl-3.0.6
openssl-3.0.7
openssl-3.0.8
openssl-3.0.9
openssl-3.1.0
openssl-3.1.1
openssl-3.1.2
openssl-3.1.3
openssl-3.1.4
openssl-3.1.5
openssl-3.1.6
openssl-3.1.7
openssl-3.2.0
openssl-3.2.1
openssl-3.2.2
openssl-3.2.3
openssl-3.3.0
openssl-3.3.1
openssl-3.3.2
openssl-3.4.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-13176.json"
vanir_signatures 
[
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "127754948284799574646612715291914192370",
                "107633108841617456827974748623002941",
                "105128839132312456559305794417964519678",
                "220978175685594651981552750147750539139",
                "169600024918161393316340193772684852098",
                "117654638435679831764459313705877108896",
                "23928219980244535399498129546065066676",
                "293745726617568990317434370779477363519"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2024-13176-02b65757",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65",
        "target": {
            "file": "crypto/ec/ec_lib.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "209975814518152852375258448294589197529",
            "length": 11318
        },
        "id": "CVE-2024-13176-1033742d",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65",
        "target": {
            "file": "crypto/bn/bn_exp.c",
            "function": "BN_mod_exp_mont_consttime"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "42797208737688127763066522181332281160",
            "length": 507
        },
        "id": "CVE-2024-13176-17161750",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/kzalewski/openssl-1.1.1/commit/9ad69b994ae7c73ba06d9f75efd2625102de814c",
        "target": {
            "file": "test/ec_internal_test.c",
            "function": "setup_tests"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "173589800300154267675612065402467888493",
                "129405406525769322493076198728768900113",
                "136800792888609131789496600562783967119",
                "159174750777734389295701369864010049181",
                "158807332022056555706233351020895631932",
                "81659307983826938737211959800551987670",
                "65661878801926066286695416919387343632",
                "331146051454193067843509155410151830908",
                "106927928807750830570996030094648112881",
                "246702777271085149088970109591189963124",
                "13553649955201634036089378149381067019",
                "48764857157202029741626741483796973376",
                "50856018716436605684813922551136358229",
                "334002642869357515784447868384854133811",
                "63758175942037580590598196895455058189",
                "191064388880109290899961512230526792681",
                "25026424422371339317817700797451463299"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2024-13176-17ac49d3",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65",
        "target": {
            "file": "crypto/bn/bn_exp.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "209975814518152852375258448294589197529",
            "length": 11318
        },
        "id": "CVE-2024-13176-23514e34",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902",
        "target": {
            "file": "crypto/bn/bn_exp.c",
            "function": "BN_mod_exp_mont_consttime"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "173589800300154267675612065402467888493",
                "129405406525769322493076198728768900113",
                "136800792888609131789496600562783967119",
                "159174750777734389295701369864010049181",
                "158807332022056555706233351020895631932",
                "81659307983826938737211959800551987670",
                "65661878801926066286695416919387343632",
                "331146051454193067843509155410151830908",
                "106927928807750830570996030094648112881",
                "246702777271085149088970109591189963124",
                "13553649955201634036089378149381067019",
                "48764857157202029741626741483796973376",
                "50856018716436605684813922551136358229",
                "334002642869357515784447868384854133811",
                "63758175942037580590598196895455058189",
                "191064388880109290899961512230526792681",
                "25026424422371339317817700797451463299"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2024-13176-2d5a8353",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902",
        "target": {
            "file": "crypto/bn/bn_exp.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "230361427007416664995616424352791763469",
                "68454496777232705137616949383570055801",
                "174227485603324825134703660955423564225",
                "306374039697804480350160125378658725435",
                "223787537721903344733141597182001711142",
                "305852724676774806958748002571762917320",
                "61902118637910596077004663207701223681",
                "278724473247779637198513168995006009135",
                "150804929727413209120953746872414715465",
                "166774358343717215765245239236385866693",
                "116293081894868411264108492273509366961",
                "326496170417124709669304286305887789679",
                "278306348133167756990680493182074324125",
                "189649085256091224929149730235838635518",
                "82945606976757935725900546138315651129",
                "136187505923069729147869676886657763243",
                "233447734599456461300796481665382809870",
                "116930820689846462220149337293161556595",
                "153181275943870954612030432229689150702",
                "65985025876624501603393736976041980125"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2024-13176-3349f255",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/kzalewski/openssl-1.1.1/commit/9ad69b994ae7c73ba06d9f75efd2625102de814c",
        "target": {
            "file": "crypto/bn/bn_gf2m.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "251324203488872817167019601435108299733",
                "40806596891362736307168808995206433787",
                "112583956667954258596531188879431655895",
                "138582937579070891515807629355127583885"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2024-13176-37feae62",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467",
        "target": {
            "file": "include/crypto/bn.h"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "127754948284799574646612715291914192370",
                "107633108841617456827974748623002941",
                "105128839132312456559305794417964519678",
                "220978175685594651981552750147750539139",
                "169600024918161393316340193772684852098",
                "117654638435679831764459313705877108896",
                "23928219980244535399498129546065066676",
                "293745726617568990317434370779477363519"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2024-13176-3e8d1eb9",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f",
        "target": {
            "file": "crypto/ec/ec_lib.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "251324203488872817167019601435108299733",
                "40806596891362736307168808995206433787",
                "112583956667954258596531188879431655895",
                "138582937579070891515807629355127583885"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2024-13176-3f42d259",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65",
        "target": {
            "file": "include/crypto/bn.h"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "173589800300154267675612065402467888493",
                "129405406525769322493076198728768900113",
                "136800792888609131789496600562783967119",
                "159174750777734389295701369864010049181",
                "158807332022056555706233351020895631932",
                "81659307983826938737211959800551987670",
                "65661878801926066286695416919387343632",
                "331146051454193067843509155410151830908",
                "106927928807750830570996030094648112881",
                "246702777271085149088970109591189963124",
                "13553649955201634036089378149381067019",
                "48764857157202029741626741483796973376",
                "50856018716436605684813922551136358229",
                "334002642869357515784447868384854133811",
                "63758175942037580590598196895455058189",
                "191064388880109290899961512230526792681",
                "25026424422371339317817700797451463299"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2024-13176-4140486d",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844",
        "target": {
            "file": "crypto/bn/bn_exp.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "251324203488872817167019601435108299733",
                "40806596891362736307168808995206433787",
                "112583956667954258596531188879431655895",
                "138582937579070891515807629355127583885"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2024-13176-48367449",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844",
        "target": {
            "file": "include/crypto/bn.h"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "30673062630639656303483208802482655434",
            "length": 494
        },
        "id": "CVE-2024-13176-4f7f516c",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/kzalewski/openssl-1.1.1/commit/9ad69b994ae7c73ba06d9f75efd2625102de814c",
        "target": {
            "file": "crypto/bn/bn_gf2m.c",
            "function": "BN_GF2m_poly2arr"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "173589800300154267675612065402467888493",
                "129405406525769322493076198728768900113",
                "136800792888609131789496600562783967119",
                "159174750777734389295701369864010049181",
                "158807332022056555706233351020895631932",
                "81659307983826938737211959800551987670",
                "65661878801926066286695416919387343632",
                "331146051454193067843509155410151830908",
                "106927928807750830570996030094648112881",
                "246702777271085149088970109591189963124",
                "13553649955201634036089378149381067019",
                "48764857157202029741626741483796973376",
                "50856018716436605684813922551136358229",
                "334002642869357515784447868384854133811",
                "63758175942037580590598196895455058189",
                "191064388880109290899961512230526792681",
                "25026424422371339317817700797451463299"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2024-13176-619982cd",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f",
        "target": {
            "file": "crypto/bn/bn_exp.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "251324203488872817167019601435108299733",
                "40806596891362736307168808995206433787",
                "112583956667954258596531188879431655895",
                "138582937579070891515807629355127583885"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2024-13176-75a092d4",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f",
        "target": {
            "file": "include/crypto/bn.h"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "251324203488872817167019601435108299733",
                "40806596891362736307168808995206433787",
                "112583956667954258596531188879431655895",
                "138582937579070891515807629355127583885"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2024-13176-948094f9",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902",
        "target": {
            "file": "include/crypto/bn.h"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "209975814518152852375258448294589197529",
            "length": 11318
        },
        "id": "CVE-2024-13176-952fba80",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f",
        "target": {
            "file": "crypto/bn/bn_exp.c",
            "function": "BN_mod_exp_mont_consttime"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "209975814518152852375258448294589197529",
            "length": 11318
        },
        "id": "CVE-2024-13176-9eef3609",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844",
        "target": {
            "file": "crypto/bn/bn_exp.c",
            "function": "BN_mod_exp_mont_consttime"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "332405531834258800453855045674511600246",
                "158343597431739389122396850815921490520",
                "3701881040623673446980161294049765680",
                "220978175685594651981552750147750539139",
                "169600024918161393316340193772684852098",
                "117654638435679831764459313705877108896",
                "23928219980244535399498129546065066676",
                "293745726617568990317434370779477363519"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2024-13176-b885df34",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844",
        "target": {
            "file": "crypto/ec/ec_lib.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "28170854778703993674264004058177114599",
                "73132526844288570625317440636111911761",
                "177405411499435185068645597737938634778",
                "224809958623850711330610094965797758930",
                "295554444428855106393106961197201359586"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2024-13176-c377fa22",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/openssl/openssl/commit/e04bd3433fd84e1861bf258ea37928d9845e6a86",
        "target": {
            "file": "include/openssl/opensslv.h"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "209975814518152852375258448294589197529",
            "length": 11318
        },
        "id": "CVE-2024-13176-cd7ba068",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467",
        "target": {
            "file": "crypto/bn/bn_exp.c",
            "function": "BN_mod_exp_mont_consttime"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "173589800300154267675612065402467888493",
                "129405406525769322493076198728768900113",
                "136800792888609131789496600562783967119",
                "159174750777734389295701369864010049181",
                "158807332022056555706233351020895631932",
                "81659307983826938737211959800551987670",
                "65661878801926066286695416919387343632",
                "331146051454193067843509155410151830908",
                "106927928807750830570996030094648112881",
                "246702777271085149088970109591189963124",
                "13553649955201634036089378149381067019",
                "48764857157202029741626741483796973376",
                "50856018716436605684813922551136358229",
                "334002642869357515784447868384854133811",
                "63758175942037580590598196895455058189",
                "191064388880109290899961512230526792681",
                "25026424422371339317817700797451463299"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2024-13176-d57277e7",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467",
        "target": {
            "file": "crypto/bn/bn_exp.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "251633914150035957322733061977107206211",
                "338514574181828579838011565939158652696",
                "76638288692106140328510055542557597351",
                "142922657400765574308962710386922248045",
                "71649992455794854055653842592139575350",
                "65527166711110472566013424527579064967",
                "253196866009476977787139000804413898733",
                "172177136897997206866313011107384691461"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2024-13176-e051451f",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/openssl/openssl/commit/e818b74be2170fbe957a07b0da4401c2b694b3b8",
        "target": {
            "file": "crypto/opensslv.h"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "202560716467995180801900703314012126638",
                "231076714992210239911677876085986544653",
                "119476550149019858610160764241585512883",
                "237713134421560846878241190267682686452",
                "291912177671523663250360670212314966717",
                "148718397703357758449784276736258891876",
                "8308956487359903771982894414540058331",
                "219665286569007368979236427780197060159"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2024-13176-f19f6747",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/kzalewski/openssl-1.1.1/commit/9ad69b994ae7c73ba06d9f75efd2625102de814c",
        "target": {
            "file": "test/ec_internal_test.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "127754948284799574646612715291914192370",
                "107633108841617456827974748623002941",
                "105128839132312456559305794417964519678",
                "220978175685594651981552750147750539139",
                "169600024918161393316340193772684852098",
                "117654638435679831764459313705877108896",
                "23928219980244535399498129546065066676",
                "293745726617568990317434370779477363519"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2024-13176-f39a6b13",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902",
        "target": {
            "file": "crypto/ec/ec_lib.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "215474658839038190857768659117172798903",
                "224789752300883698945153787266757617261",
                "56494159630746388130037307952134413004",
                "164370382436795402003615230331141913984",
                "149153318460680570484795927015804201404"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2024-13176-fa870959",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/kzalewski/openssl-1.1.1/commit/9ad69b994ae7c73ba06d9f75efd2625102de814c",
        "target": {
            "file": "include/openssl/opensslv.h"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "332405531834258800453855045674511600246",
                "158343597431739389122396850815921490520",
                "3701881040623673446980161294049765680",
                "220978175685594651981552750147750539139",
                "169600024918161393316340193772684852098",
                "117654638435679831764459313705877108896",
                "23928219980244535399498129546065066676",
                "293745726617568990317434370779477363519"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2024-13176-fe59c5b4",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467",
        "target": {
            "file": "crypto/ec/ec_lib.c"
        }
    }
]
vanir_signatures_modified 
"2026-11-11T13:28:55Z"