Medium [CVE-2023-5981] Gnutls: timing side-channel in the rsa-psk authentication
This medium-severity Red Hat Linux advisory covers CVE-2023-5981 affecting Red Hat Enterprise Linux 8.6 Extended Update Support, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9.2 Extended Update Support.
Aggregated and source-linked by VulniPulse. Data sources, validation and limitations.
VulniPulse record published
Android app · Google Play
Monitor future Red Hat Linux CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Summary
A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding. Red Hat severity: Moderate — CVSS 5.9 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).
Weakness: CWE-208. Affected Red Hat products: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 8.6 Extended Update Support; Red Hat Enterprise Linux 8.8 Extended Update Support; Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 9.2 Extended Update Support; RHODF-4.15-RHEL-9; RHOL-5.8-RHEL-9; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7.
Will not fix / out of support: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7. Red Hat fixing advisory: RHSA-2024:0155, RHSA-2024:0319, RHSA-2024:0399, RHSA-2024:0533, RHSA-2024:0451, RHSA-2024:1383, RHSA-2024:2094.
Affected products named by the advisory: Red Hat package: gnutls.
Affected versions
No affected-version range was extracted from the source record. The vendor advisory is authoritative — check it before change work.
Official advisory · high-confidence parse· fetched 5 days ago·verify at source
- gnutls-0:3.6.16-8.el8_9
- gnutls-0:3.6.16-5.el8_6.2
- gnutls-0:3.6.16-7.el8_8.1
- gnutls-0:3.7.6-23.el9_3.3
- gnutls-0:3.7.6-21.el9_2.1
- odf4/cephcsi-rhel9:v4.15.0-37
- odf4/mcg-core-rhel9:v4.15.0-68
- odf4/mcg-operator-bundle:v4.15.0-158
- odf4/mcg-rhel9-operator:v4.15.0-39
- odf4/ocs-client-console-rhel9:v4.15.0-58
- odf4/ocs-client-operator-bundle:v4.15.0-158
- odf4/ocs-client-rhel9-operator:v4.15.0-13
- odf4/ocs-metrics-exporter-rhel9:v4.15.0-81
- odf4/ocs-operator-bundle:v4.15.0-158
- odf4/ocs-rhel9-operator:v4.15.0-79
- odf4/odf-cli-rhel9:v4.15.0-22
- odf4/odf-console-rhel9:v4.15.0-57
- odf4/odf-cosi-sidecar-rhel9:v4.15.0-6
- odf4/odf-csi-addons-operator-bundle:v4.15.0-158
- odf4/odf-csi-addons-rhel9-operator:v4.15.0-15
- odf4/odf-csi-addons-sidecar-rhel9:v4.15.0-15
- odf4/odf-multicluster-console-rhel9:v4.15.0-54
- odf4/odf-multicluster-operator-bundle:v4.15.0-158
- odf4/odf-multicluster-rhel9-operator:v4.15.0-10
- odf4/odf-must-gather-rhel9:v4.15.0-26
- odf4/odf-operator-bundle:v4.15.0-158
- odf4/odf-rhel9-operator:v4.15.0-19
- odf4/odr-cluster-operator-bundle:v4.15.0-158
- odf4/odr-hub-operator-bundle:v4.15.0-158
- odf4/odr-rhel9-operator:v4.15.0-21
- odf4/rook-ceph-rhel9-operator:v4.15.0-103
- openshift-logging/cluster-logging-operator-bundle:v5.8.6-22
- openshift-logging/cluster-logging-rhel9-operator:v5.8.6-11
- openshift-logging/elasticsearch6-rhel9:v6.8.1-407
- openshift-logging/elasticsearch-operator-bundle:v5.8.6-19
- openshift-logging/elasticsearch-proxy-rhel9:v1.0.0-479
- openshift-logging/elasticsearch-rhel9-operator:v5.8.6-7
- openshift-logging/eventrouter-rhel9:v0.4.0-247
- openshift-logging/fluentd-rhel9:v5.8.6-5
- openshift-logging/log-file-metric-exporter-rhel9:v1.1.0-227
- RHSA-2024:0155
- RHSA-2024:0319
- RHSA-2024:0399
- RHSA-2024:0533
- RHSA-2024:0451
- RHSA-2024:1383
- RHSA-2024:2094
Official advisory · high-confidence parse· fetched 5 days ago·verify at source
Mitigation checklist
- To address the issue found upgrade to GnuTLS 3.8.2 or later versions.
Official advisory · high-confidence parse· fetched 5 days ago·verify at source
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.