CVE-2023-5981

MITTEL 5.9CVE-2023-5981 · Published 28/11/2023 · updated 14/10/2026

Kurz gesagt

CVE-2023-5981 ist eine Schwachstelle (MITTEL (CVSS 5.9)) in gnutls (gnu).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 1.3%, höher als bei 69.8% aller Schwachstellen.
Abhilfe: auf 3.8.2 oder neuer aktualisieren.

Package	Affected versions	Patched versions
gnutls gnu	`< 3.8.2`	`3.8.2`

Description

A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding.

References

access.redhat.com/errata/RHSA-2024:0155 · Third Party Advisory
access.redhat.com/errata/RHSA-2024:0319 · Third Party Advisory
access.redhat.com/errata/RHSA-2024:0399 · Third Party Advisory
access.redhat.com/errata/RHSA-2024:0451 · Third Party Advisory
access.redhat.com/errata/RHSA-2024:0533 · Third Party Advisory
access.redhat.com/errata/RHSA-2024:1383 · Third Party Advisory
access.redhat.com/errata/RHSA-2024:2094 · Third Party Advisory
access.redhat.com/security/cve/CVE-2023-5981 · Third Party Advisory
bugzilla.redhat.com/show_bug.cgi · Issue Tracking
gnutls.org/security-new.html · Issue Tracking
openwall.com/lists/oss-security/2024/01/19/3 · Third Party Advisory
lists.debian.org/debian-lts-announce/2023/11/msg00016.html

Weitere Schwachstellen in gnutls

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

gnutls

gnu

< 3.8.2

3.8.2

Weitere Schwachstellen in gnutls

Alle anzeigen →