CVE-2024-0553

HIGH 7.5

Gnutls: incomplete fix for cve-2023-5981

CVSS Score

7.5

EPSS Score

1.7%

EPSS Percentile

82th

A vulnerability was found in GnuTLS. The response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from the response times of ciphertexts with correct PKCS#1 v1.5 padding. This issue may allow a remote attacker to perform a timing side-channel attack in the RSA-PSK key exchange, potentially leading to the leakage of sensitive data. CVE-2024-0553 is designated as an incomplete resolution for CVE-2023-5981.

CWE	CWE-203
Published	Jan 16, 2024
Last Updated	Mar 24, 2026

Stay Ahead of the Next One

Get instant alerts for

Be the first to know when new high vulnerabilities are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Affected Versions

Red Hat / Red Hat Enterprise Linux 8

All versions affected

Red Hat / Red Hat Enterprise Linux 8

All versions affected

Red Hat / Red Hat Enterprise Linux 8.6 Extended Update Support

All versions affected

Red Hat / Red Hat Enterprise Linux 8.8 Extended Update Support

All versions affected

Red Hat / Red Hat Enterprise Linux 9

All versions affected

Red Hat / Red Hat Enterprise Linux 9

All versions affected

Red Hat / Red Hat Enterprise Linux 9.2 Extended Update Support

All versions affected

Red Hat / RHODF-4.15-RHEL-9

All versions affected

Red Hat / RHODF-4.15-RHEL-9

All versions affected

Red Hat / RHODF-4.15-RHEL-9

All versions affected

Red Hat / RHODF-4.15-RHEL-9

All versions affected

Red Hat / RHODF-4.15-RHEL-9

All versions affected

Red Hat / RHODF-4.15-RHEL-9

All versions affected

Red Hat / RHODF-4.15-RHEL-9

All versions affected

Red Hat / RHODF-4.15-RHEL-9

All versions affected

Red Hat / RHODF-4.15-RHEL-9

All versions affected

Red Hat / RHODF-4.15-RHEL-9

All versions affected

Red Hat / RHODF-4.15-RHEL-9

All versions affected

Red Hat / RHODF-4.15-RHEL-9

All versions affected

Red Hat / RHODF-4.15-RHEL-9

All versions affected

Red Hat / RHODF-4.15-RHEL-9

All versions affected

Red Hat / RHODF-4.15-RHEL-9

All versions affected

Red Hat / RHODF-4.15-RHEL-9

All versions affected

Red Hat / RHODF-4.15-RHEL-9

All versions affected

Red Hat / RHODF-4.15-RHEL-9

All versions affected

Red Hat / RHODF-4.15-RHEL-9

All versions affected

Red Hat / RHODF-4.15-RHEL-9

All versions affected

Red Hat / RHODF-4.15-RHEL-9

All versions affected

Red Hat / RHODF-4.15-RHEL-9

All versions affected

Red Hat / RHODF-4.15-RHEL-9

All versions affected

Red Hat / RHODF-4.15-RHEL-9

All versions affected

Red Hat / RHODF-4.15-RHEL-9

All versions affected

Red Hat / RHODF-4.15-RHEL-9

All versions affected

Red Hat / RHOL-5.8-RHEL-9

All versions affected

Red Hat / RHOL-5.8-RHEL-9

All versions affected

Red Hat / RHOL-5.8-RHEL-9

All versions affected

Red Hat / RHOL-5.8-RHEL-9

All versions affected

Red Hat / RHOL-5.8-RHEL-9

All versions affected

Red Hat / RHOL-5.8-RHEL-9

All versions affected

Red Hat / RHOL-5.8-RHEL-9

All versions affected

Red Hat / RHOL-5.8-RHEL-9

All versions affected

Red Hat / RHOL-5.8-RHEL-9

All versions affected

Red Hat / RHOL-5.8-RHEL-9

All versions affected

Red Hat / RHOL-5.8-RHEL-9

All versions affected

Red Hat / RHOL-5.8-RHEL-9

All versions affected

Red Hat / RHOL-5.8-RHEL-9

All versions affected

Red Hat / RHOL-5.8-RHEL-9

All versions affected

Red Hat / RHOL-5.8-RHEL-9

All versions affected

Red Hat / RHOL-5.8-RHEL-9

All versions affected

Red Hat / RHOL-5.8-RHEL-9

All versions affected

Red Hat / Red Hat Enterprise Linux 6

All versions affected

Red Hat / Red Hat Enterprise Linux 7

All versions affected

References

NVD ↗ CVE.org ↗ EPSS Data ↗