Lucene search

K
cvelistRedhatCVELIST:CVE-2023-5981
HistoryNov 28, 2023 - 11:49 a.m.

CVE-2023-5981 Gnutls: timing side-channel in the rsa-psk authentication

2023-11-2811:49:50
CWE-203
redhat
raw.githubusercontent.com
2
gnutls
rsa-psk
timing
side-channel
vulnerability

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.3%

A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding.