CVE-2023-5992 MEDIUM

CVE-2023-5992: Opensc: side-channel leaks while stripping encryption pkcs#1 padding

Vendor Red Hat

Product Red Hat Enterprise Linux 7

Weakness CWE-203

Published January 31, 2024

Last update November 6, 2025

View on NVD All CVEs

CVSS base score

5.6/10

Attack vector Network

Attack complexity High

Privileges required None

User interaction None

Confidentiality Low

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

What the vulnerability does

01Description

A vulnerability was found in OpenSC where PKCS#1 encryption padding removal is not implemented as side-channel resistant. This issue may result in the potential leak of private data.

Key dates

02Disclosure timeline

January 31, 2024 CVE published

November 6, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-5992 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/203.html

Related vulnerabilities

CVE-2023-5992: Opensc: side-channel leaks while stripping encryption pkcs#1 padding

01Description

02Disclosure timeline

03References

04Related CVE