Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

opencryptoki

A timing side-channel vulnerability (CVE-2024-0914) exists in the opencryptoki packages used by Red Hat Enterprise Linux 8.6 Extended Update Support. The flaw affects the handling of RSA PKCS#1 v1.5 padded ciphertexts, potentially leaking sensitive information through timing differences. The issue is rated as moderate severity by Red Hat. A security update addressing this vulnerability is available for affected packages.

The opencryptoki packages, which implement version 2.11 of the PKCS#11 API for IBM Cryptocards and software tokens, contain a timing side-channel vulnerability in the handling of RSA PKCS#1 v1.5 padded ciphertexts (CVE-2024-0914). This vulnerability allows attackers to potentially extract sensitive information by measuring the time taken during cryptographic operations. Red Hat has issued a security advisory (RHSA-2024:1992) providing an update that fixes this issue for Red Hat Enterprise Linux 8.6 Extended Update Support. The advisory rates the impact as moderate and provides updated packages to remediate the vulnerability.

Detailed information about Red Hat Security Advisory: opencryptoki security update affecting Red Hat Product Security Red Hat. Get real-time updates, technical 

Red Hat Security Advisory: opencryptoki security update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2024:1992

https://access.redhat.com/security/updates/classification/#moderate

2260407

Canonical URL

Red Hat Security Advisory: opencryptoki security update

A timing side-channel vulnerability has been discovered in the opencryptoki package while processing RSA PKCS#1 v1.5 padded ciphertexts. This flaw could potentially enable unauthorized RSA ciphertext decryption or signing, even without access to the corresponding private key.

CVE-2024-0914 identifies a timing side-channel vulnerability in the opencryptoki cryptographic library, specifically in version 3.0.0, during the processing of RSA ciphertexts padded with PKCS#1 v1.5. The vulnerability arises because the time taken to process certain ciphertexts varies in a way that leaks information about the plaintext or the private key operations. An attacker can exploit this timing discrepancy to perform unauthorized decryption or signature forgery without possessing the private key, undermining the confidentiality guarantees of RSA operations. The attack complexity is high, as it requires precise timing measurements and repeated ciphertext submissions, but no privileges or user interaction are needed. The vulnerability does not affect the integrity or availability of the system but compromises confidentiality. Opencryptoki is widely used in environments requiring hardware security module (HSM) support and cryptographic token interfaces, including enterprise and government systems. Although no public exploits are known, the flaw represents a significant cryptographic risk. The CVSS 3.1 vector (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) reflects network attack vector, high complexity, no privileges or user interaction, unchanged scope, and high confidentiality impact. Mitigation requires patching the vulnerable library, employing constant-time cryptographic algorithms, and avoiding the use of RSA PKCS#1 v1.5 padding where possible, favoring more secure padding schemes like RSA-PSS.

Detailed information about CVE-2024-0914: Observable Discrepancy. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-0914: Observable Discrepancy - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-0914: Observable Discrepancy


Red Hat Security Advisory: opencryptoki security updateCVE-2024-0914 0 A timing side-channel vulnerability (CVE-2024-0914) exists in the opencryptoki packages used by Red Hat Enterprise Linux 8.6 Extended Update Support. The flaw affects the handling of RSA PKCS#1 v1.5 padded ciphertexts, potentially leaking sensitive information through timing differences. The issue is rated as moderate severity by Red Hat. A security update addressing this vulnerability is available for affected packages. MediumVulnerability#gcve #csaf #cve-2024-0914 Join the discussion	GCVE Database	04/23/2024, 14:14:34 UTC Added: 06/25/2026, 21:47:38 UTC
CVE-2024-0914: Observable DiscrepancyCVE-2024-0914 0 A timing side-channel vulnerability has been discovered in the opencryptoki package while processing RSA PKCS#1 v1.5 padded ciphertexts. This flaw could potentially enable unauthorized RSA ciphertext decryption or signing, even without access to the corresponding private key. MediumVulnerabilityUnited StatesGermanyJapan+7#cve #cve-2024-0914 Join the discussion	CVE Database V5	01/31/2024, 04:53:28 UTC Added: 10/10/2025, 00:38:20 UTC

Threats Tagged 'cve-2024-0914'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2024-0914'

Lead Pen Test Professional