ALPINE-CVE-2023-5981 PUBLISHED CVSS 5.900000095367432 MEDIUM

A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding.

Risk Scores

CVSS v3.1
5.900000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected Products

VendorProductVersions
Alpine:v3.19gnutls0, 3.8.1-r0, 3.8.0-r4
Alpine:v3.21gnutls3.2.9-r0, 0, 2.12.16-r0
Alpine:v3.20gnutls3.6.13-r2, 3.6.13-r1, 3.6.13-r0
Alpine:v3.23gnutls3.1.7-r1, 3.1.8-r1, 3.1.9-r0
Alpine:v3.18gnutls3.6.10-r0, 3.6.11.1-r0, 3.6.11.1-r1
Alpine:v3.22gnutls3.6.14-r0, 3.6.15-r0, 3.6.15-r1

Timeline

References

Open in Interactive Console →