A vulnerability was found in OpenSC where PKCS#1 encryption padding removal is not implemented as side-channel resistant. This issue may result in the potential leak of private data.
CVE-2023-5992
CVSS base score
5.6 (v3.1)
Severity
MEDIUM
Attack vector
Network
Weakness
CWE-203
Last modified
November 5, 2026
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Affected products
opensc project opensc
redhat enterprise linux
redhat enterprise linux eus
redhat enterprise linux for arm 64
redhat enterprise linux for arm 64 eus
redhat enterprise linux for ibm z systems
redhat enterprise linux for ibm z systems eus
redhat enterprise linux for power little endian
redhat enterprise linux for power little endian eus
redhat enterprise linux server aus
References
- access.redhat.com Third Party Advisory
- access.redhat.com Third Party Advisory
- access.redhat.com Third Party Advisory
- bugzilla.redhat.com Issue Tracking
- github.com Vendor Advisory
- www.usenix.org Exploit, Technical Description
- access.redhat.com Third Party Advisory
- access.redhat.com Third Party Advisory
- access.redhat.com Third Party Advisory
- bugzilla.redhat.com Issue Tracking