Lucene search

K
redhatcveRedhat.comRH:CVE-2023-6240
HistoryFeb 04, 2024 - 2:10 p.m.

CVE-2023-6240

2024-02-0414:10:58
redhat.com
access.redhat.com
22
marvin vulnerability
linux kernel
rsa decryption
side-channel leakage
network attacker
ciphertexts
forge signatures
private key

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N

AI Score

6

Confidence

High

EPSS

0.001

Percentile

46.8%

A Marvin vulnerability side-channel leakage was found in the RSA decryption operation in the Linux Kernel. This issue may allow a network attacker to decrypt ciphertexts or forge signatures, limiting the services that use that private key.

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N

AI Score

6

Confidence

High

EPSS

0.001

Percentile

46.8%