CVE-2023-5981

MediumCVSS 5.9/10Last modified Nov 5, 2026

Description

A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding.

Metrics

CVSS 3.1 5.9/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-208CWE-203

Affected software

VendorProductVersions
Red HatRed Hat Enterprise Linux 8—
Red HatRed Hat Enterprise Linux 8—
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support—
Red HatRed Hat Enterprise Linux 8.8 Extended Update Support—
Red HatRed Hat Enterprise Linux 9—
Red HatRed Hat Enterprise Linux 9—
Red HatRed Hat Enterprise Linux 9.2 Extended Update Support—
Red HatRHODF-4.15-RHEL-9—
Red HatRHODF-4.15-RHEL-9—
Red HatRHODF-4.15-RHEL-9—
Red HatRHODF-4.15-RHEL-9—
Red HatRHODF-4.15-RHEL-9—
Red HatRHODF-4.15-RHEL-9—
Red HatRHODF-4.15-RHEL-9—
Red HatRHODF-4.15-RHEL-9—
Red HatRHODF-4.15-RHEL-9—
Red HatRHODF-4.15-RHEL-9—
Red HatRHODF-4.15-RHEL-9—
Red HatRHODF-4.15-RHEL-9—
Red HatRHODF-4.15-RHEL-9—
Red HatRHODF-4.15-RHEL-9—
Red HatRHODF-4.15-RHEL-9—
Red HatRHODF-4.15-RHEL-9—
Red HatRHODF-4.15-RHEL-9—
Red HatRHODF-4.15-RHEL-9—
Red HatRHODF-4.15-RHEL-9—
Red HatRHODF-4.15-RHEL-9—
Red HatRHODF-4.15-RHEL-9—
Red HatRHODF-4.15-RHEL-9—
Red HatRHODF-4.15-RHEL-9—
Red HatRHODF-4.15-RHEL-9—
Red HatRHODF-4.15-RHEL-9—
Red HatRHODF-4.15-RHEL-9—
Red HatRHOL-5.8-RHEL-9—
Red HatRHOL-5.8-RHEL-9—
Red HatRHOL-5.8-RHEL-9—
Red HatRHOL-5.8-RHEL-9—
Red HatRHOL-5.8-RHEL-9—
Red HatRHOL-5.8-RHEL-9—
Red HatRHOL-5.8-RHEL-9—
Red HatRHOL-5.8-RHEL-9—
Red HatRHOL-5.8-RHEL-9—
Red HatRHOL-5.8-RHEL-9—
Red HatRHOL-5.8-RHEL-9—
Red HatRHOL-5.8-RHEL-9—
Red HatRHOL-5.8-RHEL-9—
Red HatRHOL-5.8-RHEL-9—
Red HatRHOL-5.8-RHEL-9—
Red HatRHOL-5.8-RHEL-9—
Red HatRHOL-5.8-RHEL-9—

References

Timeline

Published
Nov 28, 2023
Last modified
Nov 5, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-59825.4The UpdraftPlus: WordPress Backup & Migration Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to,CVE-2023-59837.5Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Botanik Software Pharmacy Automation allows Retrieve EmbeCVE-2023-59844.9A CWE-494 Download of Code Without Integrity Check vulnerability exists that could allow modified firmware to be uploaded when an authorizedCVE-2023-59854.8A CWE-79 Improper Neutralization of Input During Web Page Generation vulnerability exists that could cause compromise of a user’s browser whCVE-2023-59866.1A CWE-601 URL Redirection to Untrusted Site vulnerability exists that could cause an openredirect vulnerability leading to a cross site scriCVE-2023-59876.1A CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability that could cause a vulnerability lCVE-2023-59886.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Uyumsoft Information System and TechnoCVE-2023-59896.1An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Uyumsoft Information System and TecCVE-2023-59906.5The Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor WordPress plugin before 3.4.2 does not have CSRF checks on CVE-2023-59919.8The Hotel Booking Lite WordPress plugin before 4.8.5 does not validate file paths provided via user input, as well as does not have proper CCVE-2023-59925.9A vulnerability was found in OpenSC where PKCS#1 encryption padding removal is not implemented as side-channel resistant. This issue may resCVE-2023-59937.8A flaw in the Windows Installer in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to escalate their pr
CVE-2023-5981: Medium severity, CVSS 5.9 | Vulnix