Lucene search

K
prionPRIOn knowledge basePRION:CVE-2024-0914
HistoryJan 31, 2024 - 5:15 a.m.

Design/Logic Flaw

2024-01-3105:15:00
PRIOn knowledge base
www.prio-n.com
3
timing side-channel
vulnerability
opencryptoki package
rsa pkcs#1 v1.5
unauthorized decryption
unauthorized signing
private key access
nvd

6.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

40.7%

A timing side-channel vulnerability has been discovered in the opencryptoki package while processing RSA PKCS#1 v1.5 padded ciphertexts. This flaw could potentially enable unauthorized RSA ciphertext decryption or signing, even without access to the corresponding private key.

6.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

40.7%