CVE-2024-26306 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2024-26306 Interim 1 24 2026-03-05T02:49:02Z current 2024-05-15T23:12:39Z 2026-03-05T02:49:02Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2024-26306 iPerf3 before 3.17, when used with OpenSSL before 3.2.0 as a server with RSA authentication, allows a timing side channel in RSA decryption operations. This side channel could be sufficient for an attacker to recover credential plaintext. It requires the attacker to send a large number of messages for decryption, as described in "Everlasting ROBOT: the Marvin Attack" by Hubert Kario. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/suse-liberty-linux-updates/2024-November/000593.html E-Mail link for RHSA-2024:9185 https://lists.suse.com/pipermail/sle-updates/2024-June/035556.html E-Mail link for SUSE-SU-2024:1981-1 https://lists.suse.com/pipermail/sle-security-updates/2025-June/021039.html E-Mail link for SUSE-SU-2025:20288-1 https://lists.suse.com/pipermail/sle-security-updates/2026-February/024198.html E-Mail link for SUSE-SU-2026:20286-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings Container suse/sl-micro/6.0/baremetal-os-container:latest Container suse/sl-micro/6.0/base-os-container:latest Container suse/sl-micro/6.0/kvm-os-container:latest Container suse/sl-micro/6.0/rt-os-container:latest Container suse/sl-micro/6.0/toolbox:latest Image SL-Micro Image SL-Micro-Base Image SL-Micro-Base-RT Image SL-Micro-Base-RT-SelfInstall Image SL-Micro-Base-RT-encrypted Image SL-Micro-Base-SelfInstall Image SL-Micro-Base-encrypted Image SL-Micro-Base-qcow Image SL-Micro-Default Image SL-Micro-Default-SelfInstall Image SL-Micro-Default-encrypted Image SL-Micro-Default-qcow Image SLE-Micro Image SLE-Micro-Azure Image SLE-Micro-BYOS Image SLE-Micro-BYOS-Azure Image SLE-Micro-BYOS-EC2 Image SLE-Micro-BYOS-GCE Image SLE-Micro-EC2 Image SLE-Micro-GCE SUSE Enterprise Storage 7.1 SUSE Liberty Linux 8 SUSE Liberty Linux 9 SUSE Linux Enterprise Module for Package Hub 15 SP5 SUSE Linux Enterprise Module for Package Hub 15 SP6 SUSE Linux Enterprise Module for Package Hub 15 SP7 SUSE Linux Enterprise Server 16.0 openSUSE Leap 15.5 openSUSE Leap 15.6 openSUSE Tumbleweed findutils-4.9.0-slfo.1.1_2.1 iperf-3.17.1-1.1 iperf-3.17.1-150000.3.9.1 iperf-3.19.1-160000.1.2 iperf-devel-3.17.1-1.1 iperf-devel-3.17.1-150000.3.9.1 iperf-devel-3.19.1-160000.1.2 iperf3-3.5-10.el8_10 iperf3-3.9-13.el9 libiperf0-3.17.1-1.1 libiperf0-3.17.1-150000.3.9.1 libiperf0-3.19.1-160000.1.2 findutils-4.9.0-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.0/baremetal-os-container:latest findutils-4.9.0-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.0/base-os-container:latest findutils-4.9.0-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.0/kvm-os-container:latest findutils-4.9.0-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.0/rt-os-container:latest findutils-4.9.0-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.0/toolbox:latest findutils-4.9.0-slfo.1.1_2.1 as a component of Image SL-Micro findutils-4.9.0-slfo.1.1_2.1 as a component of Image SL-Micro-Base findutils-4.9.0-slfo.1.1_2.1 as a component of Image SL-Micro-Base-RT findutils-4.9.0-slfo.1.1_2.1 as a component of Image SL-Micro-Base-RT-SelfInstall findutils-4.9.0-slfo.1.1_2.1 as a component of Image SL-Micro-Base-RT-encrypted findutils-4.9.0-slfo.1.1_2.1 as a component of Image SL-Micro-Base-SelfInstall findutils-4.9.0-slfo.1.1_2.1 as a component of Image SL-Micro-Base-encrypted findutils-4.9.0-slfo.1.1_2.1 as a component of Image SL-Micro-Base-qcow findutils-4.9.0-slfo.1.1_2.1 as a component of Image SL-Micro-Default findutils-4.9.0-slfo.1.1_2.1 as a component of Image SL-Micro-Default-SelfInstall findutils-4.9.0-slfo.1.1_2.1 as a component of Image SL-Micro-Default-encrypted findutils-4.9.0-slfo.1.1_2.1 as a component of Image SL-Micro-Default-qcow findutils-4.9.0-slfo.1.1_2.1 as a component of Image SLE-Micro findutils-4.9.0-slfo.1.1_2.1 as a component of Image SLE-Micro-Azure findutils-4.9.0-slfo.1.1_2.1 as a component of Image SLE-Micro-BYOS findutils-4.9.0-slfo.1.1_2.1 as a component of Image SLE-Micro-BYOS-Azure findutils-4.9.0-slfo.1.1_2.1 as a component of Image SLE-Micro-BYOS-EC2 findutils-4.9.0-slfo.1.1_2.1 as a component of Image SLE-Micro-BYOS-GCE findutils-4.9.0-slfo.1.1_2.1 as a component of Image SLE-Micro-EC2 findutils-4.9.0-slfo.1.1_2.1 as a component of Image SLE-Micro-GCE iperf-3.17.1-150000.3.9.1 as a component of SUSE Enterprise Storage 7.1 libiperf0-3.17.1-150000.3.9.1 as a component of SUSE Enterprise Storage 7.1 iperf3-3.5-10.el8_10 as a component of SUSE Liberty Linux 8 iperf3-3.9-13.el9 as a component of SUSE Liberty Linux 9 iperf-3.17.1-150000.3.9.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 iperf-devel-3.17.1-150000.3.9.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 libiperf0-3.17.1-150000.3.9.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 iperf-3.17.1-150000.3.9.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 iperf-devel-3.17.1-150000.3.9.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 libiperf0-3.17.1-150000.3.9.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 iperf-3.17.1-150000.3.9.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 iperf-devel-3.17.1-150000.3.9.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 libiperf0-3.17.1-150000.3.9.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 iperf-3.19.1-160000.1.2 as a component of SUSE Linux Enterprise Server 16.0 iperf-devel-3.19.1-160000.1.2 as a component of SUSE Linux Enterprise Server 16.0 libiperf0-3.19.1-160000.1.2 as a component of SUSE Linux Enterprise Server 16.0 iperf-3.17.1-150000.3.9.1 as a component of openSUSE Leap 15.5 iperf-devel-3.17.1-150000.3.9.1 as a component of openSUSE Leap 15.5 libiperf0-3.17.1-150000.3.9.1 as a component of openSUSE Leap 15.5 iperf-3.17.1-150000.3.9.1 as a component of openSUSE Leap 15.6 iperf-devel-3.17.1-150000.3.9.1 as a component of openSUSE Leap 15.6 libiperf0-3.17.1-150000.3.9.1 as a component of openSUSE Leap 15.6 iperf-3.17.1-1.1 as a component of openSUSE Tumbleweed iperf-devel-3.17.1-1.1 as a component of openSUSE Tumbleweed libiperf0-3.17.1-1.1 as a component of openSUSE Tumbleweed iPerf3 before 3.17, when used with OpenSSL before 3.2.0 as a server with RSA authentication, allows a timing side channel in RSA decryption operations. This side channel could be sufficient for an attacker to recover credential plaintext. It requires the attacker to send a large number of messages for decryption, as described in "Everlasting ROBOT: the Marvin Attack" by Hubert Kario. CVE-2024-26306 Container suse/sl-micro/6.0/baremetal-os-container:latest:findutils-4.9.0-slfo.1.1_2.1 Container suse/sl-micro/6.0/base-os-container:latest:findutils-4.9.0-slfo.1.1_2.1 Container suse/sl-micro/6.0/kvm-os-container:latest:findutils-4.9.0-slfo.1.1_2.1 Container suse/sl-micro/6.0/rt-os-container:latest:findutils-4.9.0-slfo.1.1_2.1 Container suse/sl-micro/6.0/toolbox:latest:findutils-4.9.0-slfo.1.1_2.1 Image SL-Micro:findutils-4.9.0-slfo.1.1_2.1 Image SL-Micro-Base:findutils-4.9.0-slfo.1.1_2.1 Image SL-Micro-Base-RT:findutils-4.9.0-slfo.1.1_2.1 Image SL-Micro-Base-RT-SelfInstall:findutils-4.9.0-slfo.1.1_2.1 Image SL-Micro-Base-RT-encrypted:findutils-4.9.0-slfo.1.1_2.1 Image SL-Micro-Base-SelfInstall:findutils-4.9.0-slfo.1.1_2.1 Image SL-Micro-Base-VMware:findutils-4.9.0-slfo.1.1_2.1 Image SL-Micro-Base-encrypted:findutils-4.9.0-slfo.1.1_2.1 Image SL-Micro-Base-qcow:findutils-4.9.0-slfo.1.1_2.1 Image SL-Micro-Default:findutils-4.9.0-slfo.1.1_2.1 Image SL-Micro-Default-SelfInstall:findutils-4.9.0-slfo.1.1_2.1 Image SL-Micro-Default-VMware:findutils-4.9.0-slfo.1.1_2.1 Image SL-Micro-Default-encrypted:findutils-4.9.0-slfo.1.1_2.1 Image SL-Micro-Default-qcow:findutils-4.9.0-slfo.1.1_2.1 Image SLE-Micro:findutils-4.9.0-slfo.1.1_2.1 Image SLE-Micro-Azure:findutils-4.9.0-slfo.1.1_2.1 Image SLE-Micro-BYOS:findutils-4.9.0-slfo.1.1_2.1 Image SLE-Micro-BYOS-Azure:findutils-4.9.0-slfo.1.1_2.1 Image SLE-Micro-BYOS-EC2:findutils-4.9.0-slfo.1.1_2.1 Image SLE-Micro-BYOS-GCE:findutils-4.9.0-slfo.1.1_2.1 Image SLE-Micro-EC2:findutils-4.9.0-slfo.1.1_2.1 Image SLE-Micro-GCE:findutils-4.9.0-slfo.1.1_2.1 SUSE Enterprise Storage 7.1:iperf-3.17.1-150000.3.9.1 SUSE Enterprise Storage 7.1:libiperf0-3.17.1-150000.3.9.1 SUSE Liberty Linux 8:iperf3-3.5-10.el8_10 SUSE Liberty Linux 9:iperf3-3.9-13.el9 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP7:iperf-3.17.1-150000.3.9.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP7:iperf-devel-3.17.1-150000.3.9.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP7:libiperf0-3.17.1-150000.3.9.1 SUSE Linux Enterprise Module for Package Hub 15 SP5:iperf-3.17.1-150000.3.9.1 SUSE Linux Enterprise Module for Package Hub 15 SP5:iperf-devel-3.17.1-150000.3.9.1 SUSE Linux Enterprise Module for Package Hub 15 SP5:libiperf0-3.17.1-150000.3.9.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:iperf-3.17.1-150000.3.9.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:iperf-devel-3.17.1-150000.3.9.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:libiperf0-3.17.1-150000.3.9.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-3.17.1-150000.3.9.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:iperf-devel-3.17.1-150000.3.9.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:libiperf0-3.17.1-150000.3.9.1 SUSE Linux Enterprise Server 16.0:iperf-3.19.1-160000.1.2 SUSE Linux Enterprise Server 16.0:iperf-devel-3.19.1-160000.1.2 SUSE Linux Enterprise Server 16.0:libiperf0-3.19.1-160000.1.2 openSUSE Leap 15.5:iperf-3.17.1-150000.3.9.1 openSUSE Leap 15.5:iperf-devel-3.17.1-150000.3.9.1 openSUSE Leap 15.5:libiperf0-3.17.1-150000.3.9.1 openSUSE Leap 15.6:iperf-3.17.1-150000.3.9.1 openSUSE Leap 15.6:iperf-devel-3.17.1-150000.3.9.1 openSUSE Leap 15.6:libiperf0-3.17.1-150000.3.9.1 openSUSE Tumbleweed:iperf-3.17.1-1.1 openSUSE Tumbleweed:iperf-devel-3.17.1-1.1 openSUSE Tumbleweed:libiperf0-3.17.1-1.1 moderate 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N