CVE-2023-5992
MEDIUM
MEDIUM
Priority: 0.07
BB Relevance:
62/100
Published: 2024-01-31
Modified: 2026-11-05
First seen: 2026-11-05
Status: active
Attack Surface
Network
No Auth
No Interaction
Conf. Impact
CVSS Vector Breakdown
AV:
Network
AC:
High
PR:
None
UI:
None
S:
Unchanged
C:
High
I:
None
A:
None
Description
A vulnerability was found in OpenSC where PKCS#1 encryption padding removal is not implemented as side-channel resistant. This issue may result in the potential leak of private data.
Weakness Classification (1)
Affected Software (16)
| Vendor | Product | Version |
|---|---|---|
| opensc_project | opensc | < 0.25.0 |
| redhat | enterprise_linux | 7.0 |
| redhat | enterprise_linux | 8.0 |
| redhat | enterprise_linux | 9.0 |
| redhat | enterprise_linux_eus | 9.4 |
| redhat | enterprise_linux_for_arm_64 | 8.0_aarch64 |
| redhat | enterprise_linux_for_arm_64 | 9.0_aarch64 |
| redhat | enterprise_linux_for_arm_64_eus | 9.4_aarch64 |
| redhat | enterprise_linux_for_ibm_z_systems | 8.0_s390x |
| redhat | enterprise_linux_for_ibm_z_systems | 9.0_s390x |
| redhat | enterprise_linux_for_ibm_z_systems_eus | 9.4_s390x |
| redhat | enterprise_linux_for_power_little_endian | 9.0_ppc64le |
| redhat | enterprise_linux_for_power_little_endian_eus | 9.4_ppc64le |
| redhat | enterprise_linux_server_aus | 9.4 |
| redhat | enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions | 9.2 |
| redhat | enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions | 9.4_ppc64le |
References & Advisories (10)
vendor-advisory
x_refsource_REDHAT
vendor-advisory
x_refsource_REDHAT
vdb-entry
x_refsource_REDHAT
issue-tracking
x_refsource_REDHAT