Wind River Support Network

HomeDefectsLIN1021-6859

Fixed

LIN1021-6859 : Security Advisory - gnutls - CVE-2023-5981

Created: Nov 17, 2023 Updated: Apr 29, 2024

Resolved Date: Apr 28, 2024

Found In Version: 10.21.20.1

Severity: Standard

Applicable for: Wind River Linux LTS 21

Component/s: Userspace

Description

A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding.

https://nvd.nist.gov/vuln/detail/CVE-2023-5981

CVEs

CVE-2023-5981