Vulnerability · Published Jan 5, 2024 · Assigned by mitre
CVE-2023-52323
Medium 5.9
In plain English
A medium-severity security flaw in the fence-agents-aliyun package (AlmaLinux). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 50% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)5.9Medium
Exploit odds (30 days)0.6%top 50.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
PyCryptodome and pycryptodomex before 3.19.1 allow side-channel leakage for OAEP decryption, exploitable for a Manger attack.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | fence-agents-aliyun | 4.2.1-129.el8 | ALSA-2024:2968 |
| AlmaLinux:9 | fence-agents-aliyun | 4.10.0-62.el9 | ALSA-2024:2132 |
| AlmaLinux:8 | fence-agents-all | 4.2.1-129.el8 | ALSA-2024:2968 |
| AlmaLinux:9 | fence-agents-all | 4.10.0-62.el9 | ALSA-2024:2132 |
| AlmaLinux:8 | fence-agents-amt-ws | 4.2.1-129.el8 | ALSA-2024:2968 |
| AlmaLinux:9 | fence-agents-amt-ws | 4.10.0-62.el9 | ALSA-2024:2132 |
| AlmaLinux:8 | fence-agents-apc | 4.2.1-129.el8 | ALSA-2024:2968 |
| AlmaLinux:9 | fence-agents-apc | 4.10.0-62.el9 | ALSA-2024:2132 |
| AlmaLinux:8 | fence-agents-apc-snmp | 4.2.1-129.el8 | ALSA-2024:2968 |
| AlmaLinux:9 | fence-agents-apc-snmp | 4.10.0-62.el9 | ALSA-2024:2132 |
| AlmaLinux:8 | fence-agents-aws | 4.2.1-129.el8 | ALSA-2024:2968 |
| AlmaLinux:9 | fence-agents-aws | 4.10.0-62.el9 | ALSA-2024:2132 |
| AlmaLinux:8 | fence-agents-azure-arm | 4.2.1-129.el8 | ALSA-2024:2968 |
| AlmaLinux:9 | fence-agents-azure-arm | 4.10.0-62.el9 | ALSA-2024:2132 |
| AlmaLinux:8 | fence-agents-bladecenter | 4.2.1-129.el8 | ALSA-2024:2968 |
| AlmaLinux:9 | fence-agents-bladecenter | 4.10.0-62.el9 | ALSA-2024:2132 |
| AlmaLinux:8 | fence-agents-brocade | 4.2.1-129.el8 | ALSA-2024:2968 |
| AlmaLinux:9 | fence-agents-brocade | 4.10.0-62.el9 | ALSA-2024:2132 |
| AlmaLinux:8 | fence-agents-cisco-mds | 4.2.1-129.el8 | ALSA-2024:2968 |
| AlmaLinux:9 | fence-agents-cisco-mds | 4.10.0-62.el9 | ALSA-2024:2132 |
| AlmaLinux:8 | fence-agents-cisco-ucs | 4.2.1-129.el8 | ALSA-2024:2968 |
| AlmaLinux:9 | fence-agents-cisco-ucs | 4.10.0-62.el9 | ALSA-2024:2132 |
| AlmaLinux:8 | fence-agents-common | 4.2.1-129.el8 | ALSA-2024:2968 |
| AlmaLinux:9 | fence-agents-common | 4.10.0-62.el9 | ALSA-2024:2132 |
| AlmaLinux:8 | fence-agents-compute | 4.2.1-129.el8 | ALSA-2024:2968 |
| AlmaLinux:9 | fence-agents-compute | 4.10.0-62.el9 | ALSA-2024:2132 |
| AlmaLinux:8 | fence-agents-drac5 | 4.2.1-129.el8 | ALSA-2024:2968 |
| AlmaLinux:9 | fence-agents-drac5 | 4.10.0-62.el9 | ALSA-2024:2132 |
| AlmaLinux:8 | fence-agents-eaton-snmp | 4.2.1-129.el8 | ALSA-2024:2968 |
| AlmaLinux:9 | fence-agents-eaton-snmp | 4.10.0-62.el9 | ALSA-2024:2132 |
| AlmaLinux:8 | fence-agents-emerson | 4.2.1-129.el8 | ALSA-2024:2968 |
| AlmaLinux:9 | fence-agents-emerson | 4.10.0-62.el9 | ALSA-2024:2132 |
| AlmaLinux:8 | fence-agents-eps | 4.2.1-129.el8 | ALSA-2024:2968 |
| AlmaLinux:9 | fence-agents-eps | 4.10.0-62.el9 | ALSA-2024:2132 |
| AlmaLinux:8 | fence-agents-gce | 4.2.1-129.el8 | ALSA-2024:2968 |
| AlmaLinux:9 | fence-agents-gce | 4.10.0-62.el9 | ALSA-2024:2132 |
| AlmaLinux:8 | fence-agents-heuristics-ping | 4.2.1-129.el8 | ALSA-2024:2968 |
| AlmaLinux:9 | fence-agents-heuristics-ping | 4.10.0-62.el9 | ALSA-2024:2132 |
| AlmaLinux:8 | fence-agents-hpblade | 4.2.1-129.el8 | ALSA-2024:2968 |
| AlmaLinux:9 | fence-agents-hpblade | 4.10.0-62.el9 | ALSA-2024:2132 |
| AlmaLinux:8 | fence-agents-ibm-powervs | 4.2.1-129.el8 | ALSA-2024:2968 |
| AlmaLinux:9 | fence-agents-ibm-powervs | 4.10.0-62.el9 | ALSA-2024:2132 |
| AlmaLinux:8 | fence-agents-ibm-vpc | 4.2.1-129.el8 | ALSA-2024:2968 |
| AlmaLinux:9 | fence-agents-ibm-vpc | 4.10.0-62.el9 | ALSA-2024:2132 |
| AlmaLinux:8 | fence-agents-ibmblade | 4.2.1-129.el8 | ALSA-2024:2968 |
| AlmaLinux:9 | fence-agents-ibmblade | 4.10.0-62.el9 | ALSA-2024:2132 |
| AlmaLinux:8 | fence-agents-ifmib | 4.2.1-129.el8 | ALSA-2024:2968 |
| AlmaLinux:9 | fence-agents-ifmib | 4.10.0-62.el9 | ALSA-2024:2132 |
| AlmaLinux:8 | fence-agents-ilo-moonshot | 4.2.1-129.el8 | ALSA-2024:2968 |
| AlmaLinux:9 | fence-agents-ilo-moonshot | 4.10.0-62.el9 | ALSA-2024:2132 |
| AlmaLinux:8 | fence-agents-ilo-mp | 4.2.1-129.el8 | ALSA-2024:2968 |
| AlmaLinux:9 | fence-agents-ilo-mp | 4.10.0-62.el9 | ALSA-2024:2132 |
| AlmaLinux:8 | fence-agents-ilo-ssh | 4.2.1-129.el8 | ALSA-2024:2968 |
| AlmaLinux:9 | fence-agents-ilo-ssh | 4.10.0-62.el9 | ALSA-2024:2132 |
| AlmaLinux:8 | fence-agents-ilo2 | 4.2.1-129.el8 | ALSA-2024:2968 |
| AlmaLinux:9 | fence-agents-ilo2 | 4.10.0-62.el9 | ALSA-2024:2132 |
| AlmaLinux:8 | fence-agents-intelmodular | 4.2.1-129.el8 | ALSA-2024:2968 |
| AlmaLinux:9 | fence-agents-intelmodular | 4.10.0-62.el9 | ALSA-2024:2132 |
| AlmaLinux:8 | fence-agents-ipdu | 4.2.1-129.el8 | ALSA-2024:2968 |
| AlmaLinux:9 | fence-agents-ipdu | 4.10.0-62.el9 | ALSA-2024:2132 |
| AlmaLinux:8 | fence-agents-ipmilan | 4.2.1-129.el8 | ALSA-2024:2968 |
| AlmaLinux:9 | fence-agents-ipmilan | 4.10.0-62.el9 | ALSA-2024:2132 |
| AlmaLinux:8 | fence-agents-kdump | 4.2.1-129.el8 | ALSA-2024:2968 |
| AlmaLinux:9 | fence-agents-kdump | 4.10.0-62.el9 | ALSA-2024:2132 |
| AlmaLinux:8 | fence-agents-kubevirt | 4.2.1-129.el8 | ALSA-2024:2968 |
| AlmaLinux:9 | fence-agents-kubevirt | 4.10.0-62.el9 | ALSA-2024:2132 |
| AlmaLinux:8 | fence-agents-lpar | 4.2.1-129.el8 | ALSA-2024:2968 |
| AlmaLinux:9 | fence-agents-lpar | 4.10.0-62.el9 | ALSA-2024:2132 |
| AlmaLinux:8 | fence-agents-mpath | 4.2.1-129.el8 | ALSA-2024:2968 |
| AlmaLinux:9 | fence-agents-mpath | 4.10.0-62.el9 | ALSA-2024:2132 |
| AlmaLinux:8 | fence-agents-openstack | 4.2.1-129.el8 | ALSA-2024:2968 |
| AlmaLinux:9 | fence-agents-openstack | 4.10.0-62.el9 | ALSA-2024:2132 |
| AlmaLinux:8 | fence-agents-redfish | 4.2.1-129.el8 | ALSA-2024:2968 |
| AlmaLinux:9 | fence-agents-redfish | 4.10.0-62.el9 | ALSA-2024:2132 |
| AlmaLinux:8 | fence-agents-rhevm | 4.2.1-129.el8 | ALSA-2024:2968 |
| AlmaLinux:9 | fence-agents-rhevm | 4.10.0-62.el9 | ALSA-2024:2132 |
| AlmaLinux:8 | fence-agents-rsa | 4.2.1-129.el8 | ALSA-2024:2968 |
| AlmaLinux:9 | fence-agents-rsa | 4.10.0-62.el9 | ALSA-2024:2132 |
| AlmaLinux:8 | fence-agents-rsb | 4.2.1-129.el8 | ALSA-2024:2968 |
| AlmaLinux:9 | fence-agents-rsb | 4.10.0-62.el9 | ALSA-2024:2132 |
| AlmaLinux:8 | fence-agents-sbd | 4.2.1-129.el8 | ALSA-2024:2968 |
| AlmaLinux:9 | fence-agents-sbd | 4.10.0-62.el9 | ALSA-2024:2132 |
| AlmaLinux:8 | fence-agents-scsi | 4.2.1-129.el8 | ALSA-2024:2968 |
| AlmaLinux:9 | fence-agents-scsi | 4.10.0-62.el9 | ALSA-2024:2132 |
| AlmaLinux:8 | fence-agents-virsh | 4.2.1-129.el8 | ALSA-2024:2968 |
| AlmaLinux:9 | fence-agents-virsh | 4.10.0-62.el9 | ALSA-2024:2132 |
| AlmaLinux:8 | fence-agents-vmware-rest | 4.2.1-129.el8 | ALSA-2024:2968 |
| AlmaLinux:9 | fence-agents-vmware-rest | 4.10.0-62.el9 | ALSA-2024:2132 |
| AlmaLinux:8 | fence-agents-vmware-soap | 4.2.1-129.el8 | ALSA-2024:2968 |
| AlmaLinux:9 | fence-agents-vmware-soap | 4.10.0-62.el9 | ALSA-2024:2132 |
| AlmaLinux:8 | fence-agents-wti | 4.2.1-129.el8 | ALSA-2024:2968 |
| AlmaLinux:9 | fence-agents-wti | 4.10.0-62.el9 | ALSA-2024:2132 |
| AlmaLinux:8 | fence-agents-zvm | 4.2.1-129.el8 | ALSA-2024:2968 |
| AlmaLinux:9 | fence-agents-zvm | 4.10.0-62.el9 | ALSA-2024:2132 |
| AlmaLinux:9 | fence-virt | 4.10.0-62.el9 | ALSA-2024:2132 |
| AlmaLinux:9 | fence-virtd | 4.10.0-62.el9 | ALSA-2024:2132 |
| AlmaLinux:9 | fence-virtd-cpg | 4.10.0-62.el9 | ALSA-2024:2132 |
| AlmaLinux:9 | fence-virtd-libvirt | 4.10.0-62.el9 | ALSA-2024:2132 |
| AlmaLinux:9 | fence-virtd-multicast | 4.10.0-62.el9 | ALSA-2024:2132 |
| AlmaLinux:9 | fence-virtd-serial | 4.10.0-62.el9 | ALSA-2024:2132 |
| AlmaLinux:9 | fence-virtd-tcp | 4.10.0-62.el9 | ALSA-2024:2132 |
| AlmaLinux:9 | ha-cloud-support | 4.10.0-62.el9 | ALSA-2024:2132 |
| AlmaLinux:8 | resource-agents | 4.9.0-54.el8 | ALSA-2024:2952 |
| AlmaLinux:8 | resource-agents-aliyun | 4.9.0-54.el8 | ALSA-2024:2952 |
| AlmaLinux:8 | resource-agents-gcp | 4.9.0-54.el8 | ALSA-2024:2952 |
| AlmaLinux:8 | resource-agents-paf | 4.9.0-54.el8 | ALSA-2024:2952 |
| Debian:12 | pycryptodome | no fix listed | DEBIAN-CVE-2023-52323 |
| Debian:13 | pycryptodome | 3.20.0+dfsg-1 | DEBIAN-CVE-2023-52323 |
| Debian:14 | pycryptodome | 3.20.0+dfsg-1 | DEBIAN-CVE-2023-52323 |
| PyPI | pycryptodome | 3.19.1 | GHSA-j225-cvw7-qrx7 |
| PyPI | pycryptodome | 3.19.1 | PYSEC-2026-1811 |
| PyPI | pycryptodomex | 3.19.1 | GHSA-j225-cvw7-qrx7 |
| PyPI | pycryptodomex | 3.19.1 | PYSEC-2024-3 |
| Rocky Linux:8 | fence-agents | 0:4.2.1-129.el8 | RLSA-2024:2968 |
| Rocky Linux:8 | resource-agents | 0:4.9.0-54.el8 | RLSA-2024:2952 |
| Ubuntu:22.04:LTS | pycryptodome | 3.11.0+dfsg1-3ubuntu0.1 | USN-6595-1 |
| Ubuntu:22.04:LTS | pycryptodome | 3.11.0+dfsg1-3ubuntu0.1 | UBUNTU-CVE-2023-52323 |
Affected products (as reported)
Weakness: CWE-203 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N