NetSight
IP …
medium5.9

CVE-2023-5981

A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct …

Impact

A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding.

Affected products

VendorProductAffected versions
DebianDebian Linux
Version 10.0
GnuGnutls
before 3.8.2
RedhatLinux
Versions 8.0, 9.0
FedoraprojectFedora
Versions 37, 38

Weakness classification

CWE-208CWE-203

References