Wind River Support Network

HomeDefectsLIN1022-5890

Fixed

LIN1022-5890 : Security Advisory - gnutls - CVE-2023-5981

Created: Nov 17, 2023 Updated: Apr 17, 2024

Resolved Date: Feb 20, 2024

Found In Version: 10.22.33.1

Severity: Standard

Applicable for: Wind River Linux LTS 22

Component/s: Userspace

Description

A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding.

https://nvd.nist.gov/vuln/detail/CVE-2023-5981

CVEs

CVE-2023-5981