CVE-2024-31074

Name of the Vulnerable Software and Affected Versions: Intel(R) QAT Engine for OpenSSL versions prior to v1.6.1

Description: The issue is related to an observable timing discrepancy in the Intel(R) QAT Engine for OpenSSL software, which may allow information disclosure via network access. This discrepancy can be exploited by manipulating an unknown input, leading to a timing discrepancy vulnerability. The exploitation of this issue can enable an attacker to disclose protected information.

Recommendations: For versions prior to v1.6.1, update to version v1.6.1 or later to resolve the issue. As a temporary workaround, consider restricting network access to the Intel(R) QAT Engine for OpenSSL software until a patch is applied.