{ "cveId": "CVE-2023-5992", "url": "https://patchblox.com/security/cve/CVE-2023-5992", "summary": "CVE-2023-5992 is fixed in 4 products on 1 platform, first by DEBIAN-CVE-2023-5992, released January 31, 2024. It is not reported as exploited. Patch Radar priority: Routine.", "title": "opensc: This update for opensc fixes the following issues:\n\n- CVE-2023-5992: Fixed side-channel leaks while stripping encrypt...", "description": "This update for opensc fixes the following issues:\n\n- CVE-2023-5992: Fixed side-channel leaks while stripping encryption PKCS#1 padding (bsc#1219386).", "published": "2024-01-31T06:15:00Z", "severity": "Moderate", "cvss": 5.9, "cvssVector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "epss": 0.01156, "epssPercentile": 0.67241, "priority": "Routine", "priorityTier": 4, "exploited": false, "vendorExploited": false, "disclosed": false, "fixes": [ { "platform": "linux", "product": "opensc", "release": "Debian 12.15 (bookworm)", "fixedVersion": "0.23.0-0.3\u002Bdeb12u2", "fix": "DEBIAN-CVE-2023-5992", "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-5992", "released": "2024-01-31T14:15:48Z" }, { "platform": "linux", "product": "opensc", "release": "Debian 13.5 (trixie)", "fixedVersion": "0.25.0~rc1-1", "fix": "DEBIAN-CVE-2023-5992", "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-5992", "released": "2024-01-31T14:15:48Z" }, { "platform": "linux", "product": "opensc", "release": "Debian 14", "fixedVersion": "0.25.0~rc1-1", "fix": "DEBIAN-CVE-2023-5992", "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-5992", "released": "2024-01-31T14:15:48Z" }, { "platform": "linux", "product": "opensc", "release": "RHEL 8", "fixedVersion": "0:0.20.0-8.el8_9", "fix": "RHSA-2024:0967", "url": "https://patchblox.com/security/fix/linux/rhsa-2024-0967", "released": "2024-02-26T00:00:00Z" }, { "platform": "linux", "product": "opensc", "release": "RHEL 9", "fixedVersion": "0:0.23.0-4.el9_3", "fix": "RHSA-2024:0966", "url": "https://patchblox.com/security/fix/linux/rhsa-2024-0966", "released": "2024-02-26T00:00:00Z" }, { "platform": "linux", "product": "opensc", "release": "Ubuntu 22.04.1 LTS (jammy)", "fixedVersion": "0.22.0-1ubuntu2\u002Besm1", "fix": "opensc 0.22.0-1ubuntu2\u002Besm1", "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-opensc-0.22.0-1ubuntu2-esm1", "released": "2024-09-10T07:15:00Z" }, { "platform": "linux", "product": "opensc", "release": "almalinux 8", "fixedVersion": "0.20.0-8.el8_9", "fix": "ALSA-2024:0967", "url": "https://patchblox.com/security/fix/linux/alsa-2024-0967", "released": "2024-02-26T00:00:00Z" }, { "platform": "linux", "product": "opensc", "release": "almalinux 9", "fixedVersion": "0.23.0-4.el9_3", "fix": "ALSA-2024:0966", "url": "https://patchblox.com/security/fix/linux/alsa-2024-0966", "released": "2024-02-26T00:00:00Z" }, { "platform": "linux", "product": "opensc", "release": "amzn 2023", "fixedVersion": "0.24.0-1.amzn2023.0.3", "fix": "ALAS2023-2024-580", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-580", "released": "2024-03-27T22:12:00Z" }, { "platform": "linux", "product": "opensc", "release": "ol 8", "fixedVersion": "0:0.20.0-8.el8_9", "fix": "ELSA-2024-0967", "url": "https://patchblox.com/security/fix/linux/elsa-2024-0967", "released": "2024-02-26T00:00:00Z" }, { "platform": "linux", "product": "opensc", "release": "ol 9", "fixedVersion": "0:0.23.0-4.el9_3", "fix": "ELSA-2024-0966", "url": "https://patchblox.com/security/fix/linux/elsa-2024-0966", "released": "2024-02-26T00:00:00Z" }, { "platform": "linux", "product": "opensc", "release": "opensuse-leap 15.6", "fixedVersion": "0.22.0-150600.11.6.1", "fix": "SUSE-SU-2025:02754-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02754-1", "released": "2025-08-12T07:35:08Z" }, { "platform": "linux", "product": "opensc", "release": "rocky 8", "fixedVersion": "0:0.20.0-8.el8_9", "fix": "RLSA-2024:0967", "url": "https://patchblox.com/security/fix/linux/rlsa-2024-0967", "released": "2025-05-07T19:11:34Z" }, { "platform": "linux", "product": "opensc", "release": "rocky 9", "fixedVersion": "0:0.23.0-4.el9_3", "fix": "RLSA-2024:0966", "url": "https://patchblox.com/security/fix/linux/rlsa-2024-0966", "released": "2025-05-07T19:13:03Z" }, { "platform": "linux", "product": "opensc", "release": "sles 15.6", "fixedVersion": "0.22.0-150600.11.6.1", "fix": "SUSE-SU-2025:02754-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02754-1", "released": "2025-08-12T07:35:08Z" }, { "platform": "linux", "product": "opensc", "release": "sles 15.7", "fixedVersion": "0.22.0-150600.11.6.1", "fix": "SUSE-SU-2025:02754-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02754-1", "released": "2025-08-12T07:35:08Z" }, { "platform": "linux", "product": "opensc-debuginfo", "release": "amzn 2023", "fixedVersion": "0.24.0-1.amzn2023.0.3", "fix": "ALAS2023-2024-580", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-580", "released": "2024-03-27T22:12:00Z" }, { "platform": "linux", "product": "opensc-debugsource", "release": "amzn 2023", "fixedVersion": "0.24.0-1.amzn2023.0.3", "fix": "ALAS2023-2024-580", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-580", "released": "2024-03-27T22:12:00Z" }, { "platform": "linux", "product": "opensc-pkcs11", "release": "Ubuntu 22.04.1 LTS (jammy)", "fixedVersion": "0.22.0-1ubuntu2\u002Besm1", "fix": "opensc-pkcs11 0.22.0-1ubuntu2\u002Besm1", "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-opensc-pkcs11-0.22.0-1ubuntu2-esm1", "released": "2024-09-10T07:15:00Z" } ], "noFixYet": [], "dataAsOf": "2026-11-08T00:53:09Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }