Gnutls: timing side-channel in the rsa-psk authentication
Products / packages Red Hat Enterprise Linux 8 · Red Hat Enterprise Linux 8.6 Extended Update Support · Red Hat Enterprise Linux 8.8 Extended Update Support · 9 more
Published
Severity and exploitation
KEV coverage does not rule out exploitation.
Assessment vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:NSeverity
medium5.9CVSS measures technical severity, not the likelihood of an attack.
Known exploitation
Not listed in the checked CISA KEV catalog
Absence from CISA KEV does not rule out attacks.
Public exploit
Not established by this record
Missing evidence does not mean no public exploit exists.
Remediation
Source guidance available
Review the recorded instructions. Guidance may be a workaround rather than a fixed version.
What this means
A timing side-channel vulnerability in RSA-PSK authentication in GnuTLS may allow information disclosure. The vulnerability is due to differing response times to malformed ciphertexts. Affected products include Red Hat Enterprise Linux and Siemens SIMATIC S7-1500 CPU devices.
Summarized by @cf/meta/llama-3.3-70b-instruct-fp8-fast. Verify details against the original sources.Attack conditions
No attack-condition excerpt has been identified here. Review the full source description and references for authentication, network access, and configuration requirements.
Review supporting sources →Affected versions
Check the exact model, release, and any platform requirements against your installation.
Red Hat · redhat
Red Hat Enterprise Linux 8
1 range
Red Hat · redhat
Red Hat Enterprise Linux 8
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
0:3.6.16-8.el8_9 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:enterprise_linux:8::appstreamcpe:/o:redhat:enterprise_linux:8::baseosRed Hat · redhat
Red Hat Enterprise Linux 8
1 range
Red Hat · redhat
Red Hat Enterprise Linux 8
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
0:3.6.16-8.el8_9 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:enterprise_linux:8::appstreamcpe:/o:redhat:enterprise_linux:8::baseosRed Hat · redhat
Red Hat Enterprise Linux 8.6 Extended Update Support
1 range
Red Hat · redhat
Red Hat Enterprise Linux 8.6 Extended Update Support
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
0:3.6.16-5.el8_6.2 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:rhel_eus:8.6::appstreamcpe:/o:redhat:rhel_eus:8.6::baseosRed Hat · redhat
Red Hat Enterprise Linux 8.8 Extended Update Support
1 range
Red Hat · redhat
Red Hat Enterprise Linux 8.8 Extended Update Support
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
0:3.6.16-7.el8_8.1 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:rhel_eus:8.8::appstreamcpe:/o:redhat:rhel_eus:8.8::baseosRed Hat · redhat
Red Hat Enterprise Linux 9
1 range
Red Hat · redhat
Red Hat Enterprise Linux 9
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
0:3.7.6-23.el9_3.3 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:enterprise_linux:9::appstreamcpe:/o:redhat:enterprise_linux:9::baseosRed Hat · redhat
Red Hat Enterprise Linux 9
1 range
Red Hat · redhat
Red Hat Enterprise Linux 9
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
0:3.7.6-23.el9_3.3 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:enterprise_linux:9::appstreamcpe:/o:redhat:enterprise_linux:9::baseosRed Hat · redhat
Red Hat Enterprise Linux 9.2 Extended Update Support
1 range
Red Hat · redhat
Red Hat Enterprise Linux 9.2 Extended Update Support
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
0:3.7.6-21.el9_2.1 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:rhel_eus:9.2::appstreamcpe:/o:redhat:rhel_eus:9.2::baseosRed Hat · redhat
RHODF-4.15-RHEL-9
1 range
Red Hat · redhat
RHODF-4.15-RHEL-9
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
v4.15.0-37 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift_data_foundation:4.15::el9Red Hat · redhat
RHODF-4.15-RHEL-9
1 range
Red Hat · redhat
RHODF-4.15-RHEL-9
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
v4.15.0-68 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift_data_foundation:4.15::el9Red Hat · redhat
RHODF-4.15-RHEL-9
1 range
Red Hat · redhat
RHODF-4.15-RHEL-9
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
v4.15.0-158 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift_data_foundation:4.15::el9Red Hat · redhat
RHODF-4.15-RHEL-9
1 range
Red Hat · redhat
RHODF-4.15-RHEL-9
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
v4.15.0-39 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift_data_foundation:4.15::el9Red Hat · redhat
RHODF-4.15-RHEL-9
1 range
Red Hat · redhat
RHODF-4.15-RHEL-9
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
v4.15.0-58 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift_data_foundation:4.15::el9Red Hat · redhat
RHODF-4.15-RHEL-9
1 range
Red Hat · redhat
RHODF-4.15-RHEL-9
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
v4.15.0-158 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift_data_foundation:4.15::el9Red Hat · redhat
RHODF-4.15-RHEL-9
1 range
Red Hat · redhat
RHODF-4.15-RHEL-9
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
v4.15.0-13 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift_data_foundation:4.15::el9Red Hat · redhat
RHODF-4.15-RHEL-9
1 range
Red Hat · redhat
RHODF-4.15-RHEL-9
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
v4.15.0-81 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift_data_foundation:4.15::el9Red Hat · redhat
RHODF-4.15-RHEL-9
1 range
Red Hat · redhat
RHODF-4.15-RHEL-9
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
v4.15.0-158 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift_data_foundation:4.15::el9Red Hat · redhat
RHODF-4.15-RHEL-9
1 range
Red Hat · redhat
RHODF-4.15-RHEL-9
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
v4.15.0-79 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift_data_foundation:4.15::el9Red Hat · redhat
RHODF-4.15-RHEL-9
1 range
Red Hat · redhat
RHODF-4.15-RHEL-9
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
v4.15.0-22 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift_data_foundation:4.15::el9Red Hat · redhat
RHODF-4.15-RHEL-9
1 range
Red Hat · redhat
RHODF-4.15-RHEL-9
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
v4.15.0-57 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift_data_foundation:4.15::el9Red Hat · redhat
RHODF-4.15-RHEL-9
1 range
Red Hat · redhat
RHODF-4.15-RHEL-9
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
v4.15.0-6 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift_data_foundation:4.15::el9Red Hat · redhat
RHODF-4.15-RHEL-9
1 range
Red Hat · redhat
RHODF-4.15-RHEL-9
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
v4.15.0-158 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift_data_foundation:4.15::el9Red Hat · redhat
RHODF-4.15-RHEL-9
1 range
Red Hat · redhat
RHODF-4.15-RHEL-9
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
v4.15.0-15 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift_data_foundation:4.15::el9Red Hat · redhat
RHODF-4.15-RHEL-9
1 range
Red Hat · redhat
RHODF-4.15-RHEL-9
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
v4.15.0-15 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift_data_foundation:4.15::el9Red Hat · redhat
RHODF-4.15-RHEL-9
1 range
Red Hat · redhat
RHODF-4.15-RHEL-9
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
v4.15.0-54 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift_data_foundation:4.15::el9Red Hat · redhat
RHODF-4.15-RHEL-9
1 range
Red Hat · redhat
RHODF-4.15-RHEL-9
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
v4.15.0-158 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift_data_foundation:4.15::el9Red Hat · redhat
RHODF-4.15-RHEL-9
1 range
Red Hat · redhat
RHODF-4.15-RHEL-9
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
v4.15.0-10 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift_data_foundation:4.15::el9Red Hat · redhat
RHODF-4.15-RHEL-9
1 range
Red Hat · redhat
RHODF-4.15-RHEL-9
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
v4.15.0-26 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift_data_foundation:4.15::el9Red Hat · redhat
RHODF-4.15-RHEL-9
1 range
Red Hat · redhat
RHODF-4.15-RHEL-9
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
v4.15.0-158 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift_data_foundation:4.15::el9Red Hat · redhat
RHODF-4.15-RHEL-9
1 range
Red Hat · redhat
RHODF-4.15-RHEL-9
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
v4.15.0-19 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift_data_foundation:4.15::el9Red Hat · redhat
RHODF-4.15-RHEL-9
1 range
Red Hat · redhat
RHODF-4.15-RHEL-9
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
v4.15.0-158 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift_data_foundation:4.15::el9Red Hat · redhat
RHODF-4.15-RHEL-9
1 range
Red Hat · redhat
RHODF-4.15-RHEL-9
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
v4.15.0-158 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift_data_foundation:4.15::el9Red Hat · redhat
RHODF-4.15-RHEL-9
1 range
Red Hat · redhat
RHODF-4.15-RHEL-9
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
v4.15.0-21 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift_data_foundation:4.15::el9Red Hat · redhat
RHODF-4.15-RHEL-9
1 range
Red Hat · redhat
RHODF-4.15-RHEL-9
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
v4.15.0-103 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift_data_foundation:4.15::el9Red Hat · redhat
RHOL-5.8-RHEL-9
1 range
Red Hat · redhat
RHOL-5.8-RHEL-9
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
v5.8.6-22 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:logging:5.8::el9Red Hat · redhat
RHOL-5.8-RHEL-9
1 range
Red Hat · redhat
RHOL-5.8-RHEL-9
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
v5.8.6-11 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:logging:5.8::el9Red Hat · redhat
RHOL-5.8-RHEL-9
1 range
Red Hat · redhat
RHOL-5.8-RHEL-9
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
v6.8.1-407 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:logging:5.8::el9Red Hat · redhat
RHOL-5.8-RHEL-9
1 range
Red Hat · redhat
RHOL-5.8-RHEL-9
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
v5.8.6-19 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:logging:5.8::el9Red Hat · redhat
RHOL-5.8-RHEL-9
1 range
Red Hat · redhat
RHOL-5.8-RHEL-9
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
v1.0.0-479 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:logging:5.8::el9Red Hat · redhat
RHOL-5.8-RHEL-9
1 range
Red Hat · redhat
RHOL-5.8-RHEL-9
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
v5.8.6-7 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:logging:5.8::el9Red Hat · redhat
RHOL-5.8-RHEL-9
1 range
Red Hat · redhat
RHOL-5.8-RHEL-9
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
v0.4.0-247 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:logging:5.8::el9Red Hat · redhat
RHOL-5.8-RHEL-9
1 range
Red Hat · redhat
RHOL-5.8-RHEL-9
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
v5.8.6-5 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:logging:5.8::el9Red Hat · redhat
RHOL-5.8-RHEL-9
1 range
Red Hat · redhat
RHOL-5.8-RHEL-9
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
v1.1.0-227 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:logging:5.8::el9Red Hat · redhat
RHOL-5.8-RHEL-9
1 range
Red Hat · redhat
RHOL-5.8-RHEL-9
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
v5.8.1-470 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:logging:5.8::el9Red Hat · redhat
RHOL-5.8-RHEL-9
1 range
Red Hat · redhat
RHOL-5.8-RHEL-9
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
v2.9.6-14 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:logging:5.8::el9Red Hat · redhat
RHOL-5.8-RHEL-9
1 range
Red Hat · redhat
RHOL-5.8-RHEL-9
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
v5.8.6-2 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:logging:5.8::el9Red Hat · redhat
RHOL-5.8-RHEL-9
1 range
Red Hat · redhat
RHOL-5.8-RHEL-9
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
v5.8.6-24 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:logging:5.8::el9Red Hat · redhat
RHOL-5.8-RHEL-9
1 range
Red Hat · redhat
RHOL-5.8-RHEL-9
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
v5.8.6-10 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:logging:5.8::el9Red Hat · redhat
RHOL-5.8-RHEL-9
1 range
Red Hat · redhat
RHOL-5.8-RHEL-9
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
v0.1.0-525 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:logging:5.8::el9Red Hat · redhat
RHOL-5.8-RHEL-9
1 range
Red Hat · redhat
RHOL-5.8-RHEL-9
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
v0.1.0-224 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:logging:5.8::el9Red Hat · redhat
RHOL-5.8-RHEL-9
1 range
Red Hat · redhat
RHOL-5.8-RHEL-9
Compare with this publisher’s ranges. This does not inspect your installation.
unaffected
v0.28.1-56 → before *
rpm versions
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:logging:5.8::el9Red Hat · redhat
Red Hat Enterprise Linux 6
0 ranges
Red Hat · redhat
Red Hat Enterprise Linux 6
Compare with this publisher’s ranges. This does not inspect your installation.
Other versions: unknown
Product identifiers (CPE)
cpe:/o:redhat:rhel_els:6Red Hat · redhat
Red Hat Enterprise Linux 7
0 ranges
Red Hat · redhat
Red Hat Enterprise Linux 7
Compare with this publisher’s ranges. This does not inspect your installation.
Other versions: unknown
Product identifiers (CPE)
cpe:/o:redhat:rhel_els:7Siemens · siemens-SADP
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP
1 range
Siemens · siemens-SADP
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP
Compare with this publisher’s ranges. This does not inspect your installation.
affected
V3.1.0 → before V3.1.5
custom versions
Other versions: unknown
Siemens · siemens-SADP
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP
1 range
Siemens · siemens-SADP
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP
Compare with this publisher’s ranges. This does not inspect your installation.
affected
V3.1.0 → before V3.1.5
custom versions
Other versions: unknown
Siemens · siemens-SADP
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP
1 range
Siemens · siemens-SADP
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP
Compare with this publisher’s ranges. This does not inspect your installation.
affected
V3.1.0 → before V3.1.5
custom versions
Other versions: unknown
Siemens · siemens-SADP
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP
1 range
Siemens · siemens-SADP
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP
Compare with this publisher’s ranges. This does not inspect your installation.
affected
V3.1.0 → before V3.1.5
custom versions
Other versions: unknown
Siemens · siemens-SADP
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP
1 range
Siemens · siemens-SADP
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP
Compare with this publisher’s ranges. This does not inspect your installation.
affected
V3.1.0 → before V3.1.5
custom versions
Other versions: unknown
What to do
Compare your installed product and version with the affected versions above. A matching product name alone does not confirm exposure.
To address the issue found upgrade to GnuTLS 3.8.2 or later versions.
cve.new guidance unless attributed to a publisher. This page does not inspect your installation.
Public exploit evidence
No public exploit reference is identified in the imported evidence. This is not a claim that no exploit exists.
Original source description
Read the full publisher description
A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding.
References
15 sourcesView 9 more references
Inside the record
Evidence available
Describes the evidence in this view, not whether the product is safe.
Original records
CVE-2023-5981View the latest unmodified CVE JSON from the official source. It may be newer than this imported page.
cve.new JSON →Underlying weaknesses
The source’s classification of what caused the vulnerability.
Contributing organizations · 3
Assigning organization
Additional data publisher
Additional data publisher
Timeline
All times UTCAdvisory published
Publication date supplied by the source.
Source updated
Latest modification date supplied by the source.
Last imported by cve.new
Latest catalog import, not the date we first saw this advisory.
What changed
Follow changesLarge field values are marked as truncated previews. Original source snapshots remain retained.