CVE-2024-28834

What it actually does

The flaw exposes a timing side-channel in GnuTLS nonce generation when GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE is used, causing a detectable step from 513-bit to 512-bit nonces that leaks private key material.

Why it matters to the business

Successful exploitation can allow recovery of private keys used for authentication and encryption, leading to loss of confidentiality for secure sessions and potential compromise of downstream systems relying on the affected library.

How an attack unfolds

An attacker capable of observing multiple signature operations under controlled conditions measures timing variations in nonce length to gradually extract bits of the private key via the Minerva side-channel technique.

How to fix it

Upgrade affected apisix (Bitnami) deployments to version 2.13.0 or later, which incorporates the corrected GnuTLS behavior; disable the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag where possible until patches are applied.

How to confirm the fix worked

Confirm the deployed GnuTLS version is newer than the vulnerable release, review application code for use of the reproducible flag, and re-test signature timing distributions to verify the 513-to-512 step is eliminated.

Typical attack path

1. Identify services using GnuTLS with the reproducible private key flag enabled
2. Trigger repeated signature operations while measuring response timing
3. Analyze timing data to distinguish 513-bit versus 512-bit nonce lengths
4. Aggregate observations to recover sufficient key material for forgery or decryption

How to detect it

Exploitation leaves no direct logs or artifacts; review application logs for unusually high volumes of signature operations from the same client and correlate with any anomalous key usage after the fact.

What your security team should do

• Prioritize upgrade of apisix (Bitnami) to 2.13.0 across all environments
• Audit cryptographic configurations for any use of reproducible private key flags
• Monitor vendor advisories for additional GnuTLS-dependent packages