Vulnerabilities > CVE-2023-6240 - Information Exposure Through Discrepancy vulnerability in multiple products

047910
CVSS 6.5 - MEDIUM
Attack vector
NETWORK
Attack complexity
HIGH
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
LOW
Availability impact
NONE
network
high complexity
linux
redhat
CWE-203
NVD
Published: 2024-02-04
Updated: 2024-04-18

Summary

A Marvin vulnerability side-channel leakage was found in the RSA decryption operation in the Linux Kernel. This issue may allow a network attacker to decrypt ciphertexts or forge signatures, limiting the services that use that private key.

Vulnerable Configurations

Part Description Count
OS
Linux
1
OS
Redhat
3

Common Weakness Enumeration (CWE)

References