CVE-2023-5992: Opensc: side-channel leaks while stripping encryption pkcs#1 padding

First published: Wed Nov 08 2023(Updated: )

A vulnerability was found in OpenSC where PKCS#1 encryption padding removal is not implemented as side-channel resistant. This issue may result in the potential leak of private data.

Credit: secalert@redhat.com secalert@redhat.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/title
• agent/type
• agent/description
• agent/first-publish-date
• agent/severity
• agent/weakness
• collector/redhat-bugzilla
• source/Red Hat
• alias/CVE-2023-5992
• agent/software-canonical-lookup
• agent/author
• agent/softwarecombine
• agent/event
• collector/mitre-cve
• source/MITRE
• agent/last-modified-date
• collector/nvd-cve
• source/NVD
• agent/references
• agent/tags
• collector/nvd-api
• package-manager/redhat
• vendor/opensc project
• canonical/opensc project opensc
• vendor/redhat
• canonical/redhat enterprise linux
• version/redhat enterprise linux/7.0
• version/redhat enterprise linux/8.0
• version/redhat enterprise linux/9.0
• canonical/redhat enterprise linux eus
• version/redhat enterprise linux eus/9.4
• canonical/redhat enterprise linux for arm 64
• version/redhat enterprise linux for arm 64/8.0_aarch64
• version/redhat enterprise linux for arm 64/9.0_aarch64
• canonical/redhat enterprise linux for arm 64 eus
• version/redhat enterprise linux for arm 64 eus/9.4_aarch64
• canonical/redhat enterprise linux for ibm z systems
• version/redhat enterprise linux for ibm z systems/8.0_s390x
• version/redhat enterprise linux for ibm z systems/9.0_s390x
• canonical/redhat enterprise linux for ibm z systems eus
• version/redhat enterprise linux for ibm z systems eus/9.4_s390x
• canonical/redhat enterprise linux for power little endian
• version/redhat enterprise linux for power little endian/9.0_ppc64le
• canonical/redhat enterprise linux for power little endian eus
• version/redhat enterprise linux for power little endian eus/9.4_ppc64le
• canonical/redhat enterprise linux server aus
• version/redhat enterprise linux server aus/9.4
• canonical/redhat enterprise linux server for power little endian update services for sap solutions
• version/redhat enterprise linux server for power little endian update services for sap solutions/9.2
• version/redhat enterprise linux server for power little endian update services for sap solutions/9.4_ppc64le