What’s Vulnerable › Vulnerabilities

CVE-2023-6258: Pkcs11-provider: side-channel proofing pkcs#1 1.5 paths

• Severity: high (CVSS 8.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-01-30 · updated 2026-06-17
• Weakness: CWE-1300

Description

A security vulnerability has been identified in the pkcs11-provider, which is associated with Public-Key Cryptography Standards (PKCS#11). If exploited successfully, this vulnerability could result in a Bleichenbacher-like security flaw, potentially enabling a side-channel attack on PKCS#1 1.5 decryption.

Affected products

• latchset Pkcs11-Provider: 0.1

References

• https://bugzilla.redhat.com/show_bug.cgi?id=2251062
• https://github.com/latchset/pkcs11-provider/pull/308
• https://bugzilla.redhat.com/show_bug.cgi?id=2251062
• https://github.com/latchset/pkcs11-provider/pull/308

Get alerted when CVE-2023-6258 or the next vulnerability affects your stack