CVE-2023-41097
Potential Timing vulnerability in CBC PKCS7 padding calculations
Résumé
Potential Timing vulnerability in CBC PKCS7 padding calculations
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An Observable Timing Discrepancy, Covert Timing Channel vulnerability in Silabs GSDK on ARM potentially allows Padding Oracle Crypto Attack on CBC PKCS7.This issue affects GSDK: through 4.4.0.
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory siliconlabs.lightning.force.com
- patch github.com