CVE-2024-13176 | OpenSSL up to 3.4.0 ECDSA Signature covert timing channel

A vulnerability, which was classified as problematic, was found in OpenSSL up to 3.4.0. This affects an unknown part of the component ECDSA Signature Handler. The manipulation leads to covert timing channel.

This vulnerability is uniquely identified as CVE-2024-13176. An attack has to be approached locally. There is no exploit available.

It is recommended to upgrade the affected component.