Vulnerability · Published Nov 28, 2023 · Assigned by redhat
CVE-2023-5981Gnutls: timing side-channel in the rsa-psk authentication
Medium 5.9
In plain English
A medium-severity security flaw in Red Hat Enterprise Linux 6 from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.3% (higher than 70% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)5.9Medium
Exploit odds (30 days)1.3%top 30.1% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | gnutls | 3.6.16-8.el8_9.1 | ALSA-2024:0627 |
| AlmaLinux:8 | gnutls | 3.6.16-8.el8_9 | ALSA-2024:0155 |
| AlmaLinux:9 | gnutls | 3.7.6-23.el9_3.3 | ALSA-2024:0533 |
| AlmaLinux:8 | gnutls-c++ | 3.6.16-8.el8_9.1 | ALSA-2024:0627 |
| AlmaLinux:8 | gnutls-c++ | 3.6.16-8.el8_9 | ALSA-2024:0155 |
| AlmaLinux:9 | gnutls-c++ | 3.7.6-23.el9_3.3 | ALSA-2024:0533 |
| AlmaLinux:8 | gnutls-dane | 3.6.16-8.el8_9 | ALSA-2024:0155 |
| AlmaLinux:8 | gnutls-dane | 3.6.16-8.el8_9.1 | ALSA-2024:0627 |
| AlmaLinux:9 | gnutls-dane | 3.7.6-23.el9_3.3 | ALSA-2024:0533 |
| AlmaLinux:8 | gnutls-devel | 3.6.16-8.el8_9.1 | ALSA-2024:0627 |
| AlmaLinux:8 | gnutls-devel | 3.6.16-8.el8_9 | ALSA-2024:0155 |
| AlmaLinux:9 | gnutls-devel | 3.7.6-23.el9_3.3 | ALSA-2024:0533 |
| AlmaLinux:8 | gnutls-utils | 3.6.16-8.el8_9 | ALSA-2024:0155 |
| AlmaLinux:8 | gnutls-utils | 3.6.16-8.el8_9.1 | ALSA-2024:0627 |
| AlmaLinux:9 | gnutls-utils | 3.7.6-23.el9_3.3 | ALSA-2024:0533 |
| Alpine:v3.20 | gnutls | 3.8.3-r0 | ALPINE-CVE-2023-5981 |
| Alpine:v3.21 | gnutls | 3.8.3-r0 | ALPINE-CVE-2023-5981 |
| Alpine:v3.22 | gnutls | 3.8.3-r0 | ALPINE-CVE-2023-5981 |
| Alpine:v3.23 | gnutls | 3.8.3-r0 | ALPINE-CVE-2023-5981 |
| Alpine:v3.24 | gnutls | 3.8.3-r0 | ALPINE-CVE-2023-5981 |
| Debian:12 | gnutls28 | 3.7.9-2+deb12u1 | DEBIAN-CVE-2023-5981 |
| Debian:13 | gnutls28 | 3.8.2-1 | DEBIAN-CVE-2023-5981 |
| Debian:14 | gnutls28 | 3.8.2-1 | DEBIAN-CVE-2023-5981 |
| Rocky Linux:8 | gnutls | 0:3.6.16-8.el8_9 | RLSA-2024:0155 |
| Ubuntu:22.04:LTS | gnutls28 | 3.7.3-4ubuntu1.3 | UBUNTU-CVE-2023-5981 |
| Ubuntu:22.04:LTS | gnutls28 | 3.7.3-4ubuntu1.3 | USN-6499-1 |
Affected products (as reported)
Weakness: CWE-208 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
References
- RHSA-2024:0155 vendor-advisory, x_refsource_REDHAT
- RHSA-2024:0319 vendor-advisory, x_refsource_REDHAT
- RHSA-2024:0399 vendor-advisory, x_refsource_REDHAT
- RHSA-2024:0451 vendor-advisory, x_refsource_REDHAT
- RHSA-2024:0533 vendor-advisory, x_refsource_REDHAT
- RHSA-2024:1383 vendor-advisory, x_refsource_REDHAT
- RHSA-2024:2094 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/security/cve/CVE-2023-5981 vdb-entry, x_refsource_REDHAT
- RHBZ#2248445 issue-tracking, x_refsource_REDHAT
- https://gnutls.org/security-new.html#GNUTLS-SA-2023-10-23
- http://www.openwall.com/lists/oss-security/2024/01/19/3 x_transferred
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7ZEIOLORQ7N6WRPFXZSYDL2MC4LP7VFV/ x_transferred
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GNXKVR5YNUEBNHAHM5GSYKBZX4W2HMN2/ x_transferred
- https://lists.debian.org/debian-lts-announce/2023/11/msg00016.html
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html