CVE-2023-6258 – Pkcs11-provider: side-channel proofing pkcs#1 1.5 paths

https://notcve.org/view.php?id=CVE-2023-6258

30 Jan 2024 — A security vulnerability has been identified in the pkcs11-provider, which is associated with Public-Key Cryptography Standards (PKCS#11). If exploited successfully, this vulnerability could result in a Bleichenbacher-like security flaw, potentially enabling a side-channel attack on PKCS#1 1.5 decryption. Se ha identificado una vulnerabilidad de seguridad en el proveedor pkcs11, que está asociado con los estándares de criptografía de clave pública (PKCS#11). Si se explota con éxito, esta vulnerabilidad podr... • https://bugzilla.redhat.com/show_bug.cgi?id=2251062 • CWE-203: Observable Discrepancy CWE-1300: Improper Protection of Physical Side Channels •