{"id":"CVE-2023-5992","title":"Opensc: side-channel leaks while stripping encryption pkcs#1 padding","summary":"A vulnerability was found in OpenSC where PKCS#1 encryption padding removal is not implemented as side-channel resistant. This issue may result in the potential leak of private data.","severity":"medium","cvss":5.6,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvssSource":"cna","cwe":["CWE-203"],"vendor":"Red Hat","product":"opensc","affected":["opensc (all versions)","opensc (all versions)","opensc (all versions)"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2024-05-02T13:54:54.249985Z"},"published":"2024-01-31","updated":"2026-11-05","sourceUpdated":"2026-11-05T11:36:31.126Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2023-5992","references":[{"url":"https://access.redhat.com/errata/RHSA-2024:0966","label":"RHSA-2024:0966"},{"url":"https://access.redhat.com/errata/RHSA-2024:0967","label":"RHSA-2024:0967"},{"url":"https://access.redhat.com/security/cve/CVE-2023-5992"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2248685","label":"RHBZ#2248685"},{"url":"https://github.com/OpenSC/OpenSC/wiki/CVE-2023-5992"},{"url":"https://www.usenix.org/system/files/usenixsecurity24-shagam.pdf"}],"tags":["cve.org"],"epss":0.01156,"epssPercentile":0.67142,"ingestedAt":"2026-11-05T21:36:00.802Z","slug":"CVE-2023-5992","body":"## Overview\n\nA vulnerability was found in OpenSC where PKCS#1 encryption padding removal is not implemented as side-channel resistant. This issue may result in the potential leak of private data.\n\n## Affected\n\n- `opensc (all versions)`\n- `opensc (all versions)`\n- `opensc (all versions)`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":31,"depthScoreParts":{"impact":30.8,"likelihood":0.2,"exploitation":0,"ransomware":0},"changes":[]}