Lucene search

K
redhatcveRedhat.comRH:CVE-2023-6240
HistoryFeb 04, 2024 - 2:10 p.m.

CVE-2023-6240

2024-02-0414:10:58
redhat.com
access.redhat.com
13
marvin vulnerability
linux kernel
rsa decryption
side-channel leakage
network attacker
ciphertexts
forge signatures
private key

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.6%

A Marvin vulnerability side-channel leakage was found in the RSA decryption operation in the Linux Kernel. This issue may allow a network attacker to decrypt ciphertexts or forge signatures, limiting the services that use that private key.

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.6%