MEDIUM Published November 28, 2023

CVE-2023-5981

A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding.

CVSS base score

5.9 (v3.1)

Severity

MEDIUM

Attack vector

Network

Weakness

CWE-208, CWE-203

Last modified

November 5, 2026

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

debian debian linux gnu gnutls redhat linux fedoraproject fedora

References

access.redhat.com Third Party Advisory
access.redhat.com Third Party Advisory
access.redhat.com Third Party Advisory
access.redhat.com Third Party Advisory
access.redhat.com Third Party Advisory
access.redhat.com Third Party Advisory
access.redhat.com Third Party Advisory
access.redhat.com Third Party Advisory, Vendor Advisory
bugzilla.redhat.com Issue Tracking, Third Party Advisory
gnutls.org Issue Tracking, Vendor Advisory

View full NVD advisory →

More debian vulnerabilities

Published the same day

← Back to CVE watch

CVE-2023-5981

Affected products

References

More debian vulnerabilities

Published the same day

Related reading