opencryptoki vulnerabilities

CVEs whose affected-version data names the opencryptoki package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2024-0914Medium· 5.9

2y ago

Opencryptoki: timing side-channel in handling of rsa pkcs#1 v1.5 padded ciphertexts (marvin)

A timing side-channel vulnerability has been discovered in the opencryptoki package while processing RSA PKCS#1 v1.5 padded ciphertexts. This flaw could potentially enable unauthorized RSA ciphertext decryption or signing, even without a…

▾ SunlitRed Hat · opencryptokiEPSS 0.88%via CVEORG