NetSight
IP …
medium5.6

CVE-2023-5992

A vulnerability was found in OpenSC where PKCS#1 encryption padding removal is not implemented as side-channel resistant.

Impact

A vulnerability was found in OpenSC where PKCS#1 encryption padding removal is not implemented as side-channel resistant. This issue may result in the potential leak of private data.

Affected products

VendorProductAffected versions
Opensc ProjectOpensc
before 0.25.0
RedhatEnterprise Linux
Versions 7.0, 8.0, 9.0
RedhatEnterprise Linux Eus
Version 9.4
RedhatEnterprise Linux For Arm 64
Versions 8.0_aarch64, 9.0_aarch64
RedhatEnterprise Linux For Arm 64 Eus
Version 9.4_aarch64
RedhatEnterprise Linux For Ibm Z Systems
Versions 8.0_s390x, 9.0_s390x
RedhatEnterprise Linux For Ibm Z Systems Eus
Version 9.4_s390x
RedhatEnterprise Linux For Power Little Endian
Version 9.0_ppc64le
RedhatEnterprise Linux For Power Little Endian Eus
Version 9.4_ppc64le
RedhatEnterprise Linux Server Aus
Version 9.4
RedhatEnterprise Linux Server For Power Little Endian Update Services For Sap Solutions
Versions 9.2, 9.4_ppc64le

Weakness classification

CWE-203

References