← Back

CVE-2023-5992

nvd nist
Published: Jan 31, 2024Modified: Jun 17, 2026

JSON object

Loading...
5.9
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 2.2 / Impact: 3.6
Source: NVD

Description

A vulnerability was found in OpenSC where PKCS#1 encryption padding removal is not implemented as side-channel resistant. This issue may result in the potential leak of private data.

Affected (16)

Opensc Project
1 product
Opensc
Redhat
10 products
Enterprise Linux
Enterprise Linux Eus
Enterprise Linux For Arm 64
Enterprise Linux For Arm 64 Eus
Enterprise Linux For Ibm Z Systems
Enterprise Linux For Ibm Z Systems Eus
Enterprise Linux For Power Little Endian
Enterprise Linux For Power Little Endian Eus
Enterprise Linux Server Aus
Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Opensc
Before 0.25.0
Configuration B
15 vulnerable
Vulnerable SoftwareAffected Versions
Redhat
Enterprise Linux
Version 7.0
Enterprise Linux
Version 8.0
Enterprise Linux
Version 9.0
Enterprise Linux Eus
Version 9.4
Redhat
Enterprise Linux For Arm 64
Version 8.0_aarch64
Enterprise Linux For Arm 64
Version 9.0_aarch64
Enterprise Linux For Arm 64 Eus
Version 9.4_aarch64
Redhat
Enterprise Linux For Ibm Z Systems
Version 8.0_s390x
Enterprise Linux For Ibm Z Systems
Version 9.0_s390x
Enterprise Linux For Ibm Z Systems Eus
Version 9.4_s390x
Enterprise Linux For Power Little Endian
Version 9.0_ppc64le
Enterprise Linux For Power Little Endian Eus
Version 9.4_ppc64le
Enterprise Linux Server Aus
Version 9.4
Redhat
Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions
Version 9.2
Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions
Version 9.4_ppc64le

Related CWEs

CWE-203
Observable Discrepancy
The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not.

References (15)

Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Issue Tracking
Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
ExploitTechnical Description
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue Tracking
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.