CVE-2024-31074CWE-208

Observable timing discrepancy in some Intel(R) QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access

High · published November 13, 2024

CVSS v4.0
8.2
EPSS
1%
Percentile
43.1
In the wild
Unconfirmed
What it is

Observable timing discrepancy in some Intel(R) QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access.

The record
Technical detail
CVSS v4.0
8.2 · HIGH
Vector
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00516 · 43.1th percentile
Weakness
CWE-208 · Observable Timing Discrepancy
Published
2024-11-13T21:11Z
EPSS history
Timeline
  • 13 NOV 21:11Z
    Observable timing discrepancy in some Intel(R) QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access
    cvelistv5