Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-35077.json
JSON Data
https://api.test.osv.dev/v1/vulns/AZL-35077
Upstream
Published
2024-01-31T14:15:48Z
Modified
2026-04-01T05:12:49.931803Z
Severity
  • 5.9 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
CVE-2023-5992 affecting package opensc for versions less than 0.25.1-3
Details

A vulnerability was found in OpenSC where PKCS#1 encryption padding removal is not implemented as side-channel resistant. This issue may result in the potential leak of private data.

References

Affected packages

Azure Linux:3 / opensc

Package

Name
opensc
Purl
pkg:rpm/azure-linux/opensc

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.25.1-3

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-35077.json"