CVE-2023-6258
Pkcs11-provider: side-channel proofing pkcs#1 1.5 paths
Summary
Pkcs11-provider: side-channel proofing pkcs#1 1.5 paths
Original description
The description as published by the source.
A security vulnerability has been identified in the pkcs11-provider, which is associated with Public-Key Cryptography Standards (PKCS#11). If exploited successfully, this vulnerability could result in a Bleichenbacher-like security flaw, potentially enabling a side-channel attack on PKCS#1 1.5 decryption.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2023-6258 pkcs11-provider Fixed in: 0.3-1
References
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- report bugzilla.redhat.com
- web packages.fedoraproject.org