{"id":"CVE-2023-5981","aliases":[],"cve":{"records":[{"id":"CVE-2023-5981","source":"redhat","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2023-11-07T08:05:10.875Z","published":"2023-11-28T11:49:50.138Z","modified":"2026-11-05T11:36:28.776Z"}],"publishers":[{"name":"redhat","role":"CNA","organizationId":"53f830b8-0a3f-465b-8143-3b8a9948e749","modified":"2026-11-05T11:36:28.776Z"},{"name":"CVE","role":"ADP","organizationId":"af854a3a-2127-422b-91ae-364da2661108","modified":"2025-11-04T19:25:53.708Z"},{"name":"siemens-SADP","role":"ADP","organizationId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","modified":"2026-10-14T22:07:14.101Z"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2024:0155","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2024:0319","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2024:0399","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2024:0451","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2024:0533","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2024:1383","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2024:2094","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/security/cve/CVE-2023-5981","tags":["vdb-entry","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2248445","tags":["issue-tracking","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://gnutls.org/security-new.html#GNUTLS-SA-2023-10-23","tags":[],"source":"redhat"},{"url":"http://www.openwall.com/lists/oss-security/2024/01/19/3","tags":["x_transferred"],"source":"CVE"},{"url":"https://access.redhat.com/errata/RHSA-2024:0155","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"source":"CVE"},{"url":"https://access.redhat.com/errata/RHSA-2024:0319","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"source":"CVE"},{"url":"https://access.redhat.com/errata/RHSA-2024:0399","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"source":"CVE"},{"url":"https://access.redhat.com/errata/RHSA-2024:0451","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"source":"CVE"},{"url":"https://access.redhat.com/errata/RHSA-2024:0533","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"source":"CVE"},{"url":"https://access.redhat.com/errata/RHSA-2024:1383","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"source":"CVE"},{"url":"https://access.redhat.com/errata/RHSA-2024:2094","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"source":"CVE"},{"url":"https://access.redhat.com/security/cve/CVE-2023-5981","tags":["vdb-entry","x_refsource_REDHAT","x_transferred"],"source":"CVE"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2248445","tags":["issue-tracking","x_refsource_REDHAT","x_transferred"],"source":"CVE"},{"url":"https://gnutls.org/security-new.html#GNUTLS-SA-2023-10-23","tags":["x_transferred"],"source":"CVE"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7ZEIOLORQ7N6WRPFXZSYDL2MC4LP7VFV/","tags":["x_transferred"],"source":"CVE"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GNXKVR5YNUEBNHAHM5GSYKBZX4W2HMN2/","tags":["x_transferred"],"source":"CVE"},{"url":"https://lists.debian.org/debian-lts-announce/2023/11/msg00016.html","tags":[],"source":"CVE"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","tags":[],"source":"siemens-SADP"}],"weaknesses":[{"id":"CWE-208","description":"Observable Timing Discrepancy","source":"redhat"}],"applicability":[],"prioritization":[]},"title":"Gnutls: timing side-channel in the rsa-psk authentication","titleSource":"redhat","descriptionSource":"redhat","description":"A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding.","score":5.9,"severity":"medium","published":"2023-11-28T11:49:50.138Z","modified":"2026-11-05T11:36:28.776Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 8","platforms":[],"versions":[{"version":"0:3.6.16-8.el8_9","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 8","platforms":[],"versions":[{"version":"0:3.6.16-8.el8_9","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 8.6 Extended Update Support","platforms":[],"versions":[{"version":"0:3.6.16-5.el8_6.2","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:rhel_eus:8.6::appstream","cpe:/o:redhat:rhel_eus:8.6::baseos"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 8.8 Extended Update Support","platforms":[],"versions":[{"version":"0:3.6.16-7.el8_8.1","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:rhel_eus:8.8::appstream","cpe:/o:redhat:rhel_eus:8.8::baseos"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 9","platforms":[],"versions":[{"version":"0:3.7.6-23.el9_3.3","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 9","platforms":[],"versions":[{"version":"0:3.7.6-23.el9_3.3","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 9.2 Extended Update Support","platforms":[],"versions":[{"version":"0:3.7.6-21.el9_2.1","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:rhel_eus:9.2::appstream","cpe:/o:redhat:rhel_eus:9.2::baseos"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Red Hat","name":"RHODF-4.15-RHEL-9","platforms":[],"versions":[{"version":"v4.15.0-37","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Red Hat","name":"RHODF-4.15-RHEL-9","platforms":[],"versions":[{"version":"v4.15.0-68","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Red Hat","name":"RHODF-4.15-RHEL-9","platforms":[],"versions":[{"version":"v4.15.0-158","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Red Hat","name":"RHODF-4.15-RHEL-9","platforms":[],"versions":[{"version":"v4.15.0-39","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Red Hat","name":"RHODF-4.15-RHEL-9","platforms":[],"versions":[{"version":"v4.15.0-58","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Red Hat","name":"RHODF-4.15-RHEL-9","platforms":[],"versions":[{"version":"v4.15.0-158","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Red Hat","name":"RHODF-4.15-RHEL-9","platforms":[],"versions":[{"version":"v4.15.0-13","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Red Hat","name":"RHODF-4.15-RHEL-9","platforms":[],"versions":[{"version":"v4.15.0-81","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Red Hat","name":"RHODF-4.15-RHEL-9","platforms":[],"versions":[{"version":"v4.15.0-158","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Red Hat","name":"RHODF-4.15-RHEL-9","platforms":[],"versions":[{"version":"v4.15.0-79","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Red Hat","name":"RHODF-4.15-RHEL-9","platforms":[],"versions":[{"version":"v4.15.0-22","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Red Hat","name":"RHODF-4.15-RHEL-9","platforms":[],"versions":[{"version":"v4.15.0-57","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Red Hat","name":"RHODF-4.15-RHEL-9","platforms":[],"versions":[{"version":"v4.15.0-6","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Red Hat","name":"RHODF-4.15-RHEL-9","platforms":[],"versions":[{"version":"v4.15.0-158","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Red Hat","name":"RHODF-4.15-RHEL-9","platforms":[],"versions":[{"version":"v4.15.0-15","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Red Hat","name":"RHODF-4.15-RHEL-9","platforms":[],"versions":[{"version":"v4.15.0-15","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Red Hat","name":"RHODF-4.15-RHEL-9","platforms":[],"versions":[{"version":"v4.15.0-54","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Red Hat","name":"RHODF-4.15-RHEL-9","platforms":[],"versions":[{"version":"v4.15.0-158","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Red Hat","name":"RHODF-4.15-RHEL-9","platforms":[],"versions":[{"version":"v4.15.0-10","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Red Hat","name":"RHODF-4.15-RHEL-9","platforms":[],"versions":[{"version":"v4.15.0-26","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Red Hat","name":"RHODF-4.15-RHEL-9","platforms":[],"versions":[{"version":"v4.15.0-158","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Red Hat","name":"RHODF-4.15-RHEL-9","platforms":[],"versions":[{"version":"v4.15.0-19","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Red Hat","name":"RHODF-4.15-RHEL-9","platforms":[],"versions":[{"version":"v4.15.0-158","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Red Hat","name":"RHODF-4.15-RHEL-9","platforms":[],"versions":[{"version":"v4.15.0-158","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Red Hat","name":"RHODF-4.15-RHEL-9","platforms":[],"versions":[{"version":"v4.15.0-21","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Red Hat","name":"RHODF-4.15-RHEL-9","platforms":[],"versions":[{"version":"v4.15.0-103","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift_data_foundation:4.15::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Red Hat","name":"RHOL-5.8-RHEL-9","platforms":[],"versions":[{"version":"v5.8.6-22","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:logging:5.8::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Red Hat","name":"RHOL-5.8-RHEL-9","platforms":[],"versions":[{"version":"v5.8.6-11","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:logging:5.8::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Red Hat","name":"RHOL-5.8-RHEL-9","platforms":[],"versions":[{"version":"v6.8.1-407","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:logging:5.8::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Red Hat","name":"RHOL-5.8-RHEL-9","platforms":[],"versions":[{"version":"v5.8.6-19","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:logging:5.8::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Red Hat","name":"RHOL-5.8-RHEL-9","platforms":[],"versions":[{"version":"v1.0.0-479","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:logging:5.8::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Red Hat","name":"RHOL-5.8-RHEL-9","platforms":[],"versions":[{"version":"v5.8.6-7","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:logging:5.8::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Red Hat","name":"RHOL-5.8-RHEL-9","platforms":[],"versions":[{"version":"v0.4.0-247","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:logging:5.8::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Red Hat","name":"RHOL-5.8-RHEL-9","platforms":[],"versions":[{"version":"v5.8.6-5","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:logging:5.8::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Red Hat","name":"RHOL-5.8-RHEL-9","platforms":[],"versions":[{"version":"v1.1.0-227","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:logging:5.8::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Red Hat","name":"RHOL-5.8-RHEL-9","platforms":[],"versions":[{"version":"v5.8.1-470","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:logging:5.8::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Red Hat","name":"RHOL-5.8-RHEL-9","platforms":[],"versions":[{"version":"v2.9.6-14","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:logging:5.8::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Red Hat","name":"RHOL-5.8-RHEL-9","platforms":[],"versions":[{"version":"v5.8.6-2","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:logging:5.8::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Red Hat","name":"RHOL-5.8-RHEL-9","platforms":[],"versions":[{"version":"v5.8.6-24","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:logging:5.8::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Red Hat","name":"RHOL-5.8-RHEL-9","platforms":[],"versions":[{"version":"v5.8.6-10","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:logging:5.8::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Red Hat","name":"RHOL-5.8-RHEL-9","platforms":[],"versions":[{"version":"v0.1.0-525","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:logging:5.8::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Red Hat","name":"RHOL-5.8-RHEL-9","platforms":[],"versions":[{"version":"v0.1.0-224","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:logging:5.8::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Red Hat","name":"RHOL-5.8-RHEL-9","platforms":[],"versions":[{"version":"v0.28.1-56","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:logging:5.8::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 6","platforms":[],"versions":[],"defaultStatus":"unknown","cpes":["cpe:/o:redhat:rhel_els:6"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 7","platforms":[],"versions":[],"defaultStatus":"unknown","cpes":["cpe:/o:redhat:rhel_els:7"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Siemens","name":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","platforms":[],"versions":[{"version":"V3.1.0","status":"affected","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown","cpes":[],"source":"siemens-SADP","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Siemens","name":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","platforms":[],"versions":[{"version":"V3.1.0","status":"affected","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown","cpes":[],"source":"siemens-SADP","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Siemens","name":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","platforms":[],"versions":[{"version":"V3.1.0","status":"affected","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown","cpes":[],"source":"siemens-SADP","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Siemens","name":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","platforms":[],"versions":[{"version":"V3.1.0","status":"affected","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown","cpes":[],"source":"siemens-SADP","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"},{"vendor":"Siemens","name":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","platforms":[],"versions":[{"version":"V3.1.0","status":"affected","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown","cpes":[],"source":"siemens-SADP","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"}],"remediation":[{"text":"To address the issue found upgrade to GnuTLS 3.8.2 or later versions.","source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"}],"references":["https://access.redhat.com/errata/RHSA-2024:0155","https://access.redhat.com/errata/RHSA-2024:0319","https://access.redhat.com/errata/RHSA-2024:0399","https://access.redhat.com/errata/RHSA-2024:0451","https://access.redhat.com/errata/RHSA-2024:0533","https://access.redhat.com/errata/RHSA-2024:1383","https://access.redhat.com/errata/RHSA-2024:2094","https://access.redhat.com/security/cve/CVE-2023-5981","https://bugzilla.redhat.com/show_bug.cgi?id=2248445","https://gnutls.org/security-new.html#GNUTLS-SA-2023-10-23","http://www.openwall.com/lists/oss-security/2024/01/19/3","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7ZEIOLORQ7N6WRPFXZSYDL2MC4LP7VFV/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GNXKVR5YNUEBNHAHM5GSYKBZX4W2HMN2/","https://lists.debian.org/debian-lts-announce/2023/11/msg00016.html","https://cert-portal.siemens.com/productcert/html/ssa-398330.html"],"sources":[{"name":"CVE","id":"CVE-2023-5981","modified":"2026-11-05T11:36:28.776Z","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"}],"assessments":[{"source":"redhat","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","score":5.9}],"sourceAffected":[],"observedAt":"2026-11-05T12:47:50.158Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T02:25:31.038Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[],"aiSummary":{"text":"A timing side-channel vulnerability in RSA-PSK authentication in GnuTLS may allow information disclosure. The vulnerability is due to differing response times to malformed ciphertexts. Affected products include Red Hat Enterprise Linux and Siemens SIMATIC S7-1500 CPU devices.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-05T13:02:18.724Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2023-5981"}]}}