vulnerability

F5 Networks: CVE-2024-0553: K000138649: GnuTLS vulnerabilities CVE-2023-5981 and CVE-2024-0553

Severity
5
CVSS
(AV:N/AC:H/Au:N/C:C/I:N/A:N)
Published
11/28/2023
Added
04/29/2024
Modified
04/17/2025

Description

A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding.

Solution

f5-big-ip-upgrade-latest
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.