CVE-2023-5981 — Gnutls: timing side-channel in the rsa-psk authentication
A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding.
Published: 2023-11-28 · CVSS: 5.9 · CVSS 3.1
A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7