CVE-2023-5981
CVE-2023-5981 · Gnutls: timing side-channel in the rsa-psk authentication
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding.
CVSS 5.9 · Medium · EPSS 1.3% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
red hat enterprise linux 8
- Versions
- ≥ 0:3.6.16-8.el8_9: Not affected (rpm)
No fix published
red hat enterprise linux 8.6 extended update support
- Versions
- ≥ 0:3.6.16-5.el8_6.2: Not affected (rpm)
No fix published
red hat enterprise linux 8.8 extended update support
- Versions
- ≥ 0:3.6.16-7.el8_8.1: Not affected (rpm)
No fix published
red hat enterprise linux 9
- Versions
- ≥ 0:3.7.6-23.el9_3.3: Not affected (rpm)
No fix published
red hat enterprise linux 9.2 extended update support
- Versions
- ≥ 0:3.7.6-21.el9_2.1: Not affected (rpm)
No fix published
rhodf-4.15-rhel-9
- Versions
- ≥ v4.15.0-37: Not affected (rpm)
No fix published
rhodf-4.15-rhel-9
- Versions
- ≥ v4.15.0-68: Not affected (rpm)
No fix published
rhodf-4.15-rhel-9
- Versions
- ≥ v4.15.0-158: Not affected (rpm)
No fix published
rhodf-4.15-rhel-9
- Versions
- ≥ v4.15.0-39: Not affected (rpm)
No fix published
rhodf-4.15-rhel-9
- Versions
- ≥ v4.15.0-58: Not affected (rpm)
No fix published
rhodf-4.15-rhel-9
- Versions
- ≥ v4.15.0-13: Not affected (rpm)
No fix published
rhodf-4.15-rhel-9
- Versions
- ≥ v4.15.0-81: Not affected (rpm)
No fix published
rhodf-4.15-rhel-9
- Versions
- ≥ v4.15.0-79: Not affected (rpm)
No fix published
rhodf-4.15-rhel-9
- Versions
- ≥ v4.15.0-22: Not affected (rpm)
No fix published
rhodf-4.15-rhel-9
- Versions
- ≥ v4.15.0-57: Not affected (rpm)
No fix published
rhodf-4.15-rhel-9
- Versions
- ≥ v4.15.0-6: Not affected (rpm)
No fix published
rhodf-4.15-rhel-9
- Versions
- ≥ v4.15.0-15: Not affected (rpm)
No fix published
rhodf-4.15-rhel-9
- Versions
- ≥ v4.15.0-54: Not affected (rpm)
No fix published
rhodf-4.15-rhel-9
- Versions
- ≥ v4.15.0-10: Not affected (rpm)
No fix published
rhodf-4.15-rhel-9
- Versions
- ≥ v4.15.0-26: Not affected (rpm)
No fix published
rhodf-4.15-rhel-9
- Versions
- ≥ v4.15.0-19: Not affected (rpm)
No fix published
rhodf-4.15-rhel-9
- Versions
- ≥ v4.15.0-21: Not affected (rpm)
No fix published
rhodf-4.15-rhel-9
- Versions
- ≥ v4.15.0-103: Not affected (rpm)
No fix published
rhol-5.8-rhel-9
- Versions
- ≥ v5.8.6-22: Not affected (rpm)
No fix published
Original sources
- https://access.redhat.com/errata/RHSA-2024:0155
- https://access.redhat.com/errata/RHSA-2024:0319
- https://access.redhat.com/errata/RHSA-2024:0399
- https://access.redhat.com/errata/RHSA-2024:0451
- https://access.redhat.com/errata/RHSA-2024:0533
- https://access.redhat.com/errata/RHSA-2024:1383
- https://access.redhat.com/errata/RHSA-2024:2094
- https://access.redhat.com/security/cve/CVE-2023-5981
- https://bugzilla.redhat.com/show_bug.cgi?id=2248445
- https://gnutls.org/security-new.html#GNUTLS-SA-2023-10-23
- http://www.openwall.com/lists/oss-security/2024/01/19/3
- https://lists.fedoraproject.org/archives/list/[email protected]/message/7ZEIOLORQ7N6WRPFXZSYDL2MC4LP7VFV/
- https://lists.fedoraproject.org/archives/list/[email protected]/message/GNXKVR5YNUEBNHAHM5GSYKBZX4W2HMN2/
- https://lists.debian.org/debian-lts-announce/2023/11/msg00016.html
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
- https://nvd.nist.gov/vuln/detail/CVE-2023-5981