CVE-2023-5981

概要

参考情報

• access.redhat.com/errata/RHSA-2024:0155 · Third Party Advisory
• access.redhat.com/errata/RHSA-2024:0319 · Third Party Advisory
• access.redhat.com/errata/RHSA-2024:0399 · Third Party Advisory
• access.redhat.com/errata/RHSA-2024:0451 · Third Party Advisory
• access.redhat.com/errata/RHSA-2024:0533 · Third Party Advisory
• access.redhat.com/errata/RHSA-2024:1383 · Third Party Advisory
• access.redhat.com/errata/RHSA-2024:2094 · Third Party Advisory
• access.redhat.com/security/cve/CVE-2023-5981 · Third Party Advisory
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• gnutls.org/security-new.html · Issue Tracking
• openwall.com/lists/oss-security/2024/01/19/3 · Third Party Advisory
• lists.debian.org/debian-lts-announce/2023/11/msg00016.html · Third Party Advisory
• lists.fedoraproject.org/archives/list/[email protected]/message/7ZEIOLORQ7N6WRPFXZSYDL2MC4LP7VFV · Broken Link
• lists.fedoraproject.org/archives/list/[email protected]/message/GNXKVR5YNUEBNHAHM5GSYKBZX4W2HMN2 · Broken Link
• cert-portal.siemens.com/productcert/html/ssa-398330.html

gnutls のその他の脆弱性

• CVE-2025-32988高 8.2A flaw was found in GnuTLS. A double-free vulnerability exists in GnuTLS due to incorrect ownership handling in the export logic of Subject …
• CVE-2024-0567高 7.5A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust. This issue occu…
• CVE-2024-0553高 7.5A vulnerability was found in GnuTLS. The response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from the response times…
• CVE-2023-0361高 7.4A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. This side-channel can be sufficient to rec…
• CVE-2021-4209中 6.5A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy, providing zero-length input m…