CVE-2023-5992

Katalog CVE

CVSS 5.9 · Medium EPSS 1,2%

Kerentanan Observable Discrepancy pada opensc project opensc, redhat enterprise linux +9 lainnya. Skor CVSS 3.1 5.9 (Medium) menurut NVD.

Deskripsi (NVD)

A vulnerability was found in OpenSC where PKCS#1 encryption padding removal is not implemented as side-channel resistant. This issue may result in the potential leak of private data.

Rincian

Terbit di NVD

31 Januari 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.9 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-203: Observable Discrepancy

EPSS (30 hari)

1,2% peluang dieksploitasi; lebih tinggi dari 66,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/OpenSC/OpenSC/wiki/CVE-2023-5992 advisory vendor
• https://access.redhat.com/errata/RHSA-2024:0966 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2024:0967 advisory pihak ketiga
• https://access.redhat.com/security/cve/CVE-2023-5992 advisory pihak ketiga
• https://www.usenix.org/system/files/usenixsecurity24-shagam.pdf exploit · deskripsi teknis
• https://bugzilla.redhat.com/show_bug.cgi?id=2248685 issue tracking
• https://lists.debian.org/debian-lts-announce/2024/12/msg00026.html
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OWIZ5ZLO5ECYPLS...
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RJI2FWLY24EOPAL...
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UECKC7X4IM4YZQ5...