5.9

CVE-2023-5992: opensc_project opensc Observable Discrepancy

CVSS: 5.9v3.1MediumModified
AliasesMGASA-2024-0101SUSE-SU-2024:1402-1SUSE-SU-2024:1402-2
Published 31-01-2024Last modified 06-11-2025
Open JSON

Vulnerability summary

CVE-2023-5992 is a medium (CVSS 5.9) Observable Discrepancy vulnerability in opensc_project opensc. EPSS estimates a 1.16% chance of exploitation in the next 30 days, higher than 66.5% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk
34/100
0100
Medium · default modelHow is this calculated?
CVSS score
5.9/10
010
Medium · v3.1 (NVD)
EPSS score
1.16%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1reference

Advisory lineage

Upstream 0 · Downstream 3 · Related 2
DLA-4004-1SUSE-SU-2025:20671-1USN-7346-1

Timeline

  1. 31-01-2024
    PublishedVulnerability first disclosed.
  2. 06-11-2025
    Last modifiedVulnerability information updated.

Description

A vulnerability was found in OpenSC where PKCS#1 encryption padding removal is not implemented as side-channel resistant. This issue may result in the potential leak of private data.

CVSS metrics

5 scores · 5 sources · 1 version

EPSS trend

Probability

1.16%

Chance of exploitation in the next 30 days

Percentile

67%

Versus all other CVEs

30-day change

0.00 pp

From 1.16% on 19-09-2026

19-09-202619-10-2026
EPSS score
1.16%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found
  • referenceUnverified

    Exploit Reference (usenix.org)

    Maturity: unknown

Weaknesses

CWE · root cause

Affected systems

Redhat13 products
Suse11 products
  • opensc&distro=SUSE Linux Enterprise Micro 5.1< 0.19.0-150100.3.28.1
  • opensc&distro=SUSE Linux Enterprise Micro 5.2< 0.19.0-150100.3.28.1
  • opensc&distro=SUSE Linux Enterprise Micro 5.3< 0.22.0-150400.3.9.1
  • opensc&distro=SUSE Linux Enterprise Micro 5.4< 0.22.0-150400.3.9.1
  • opensc&distro=SUSE Linux Enterprise Micro 5.5< 0.22.0-150400.3.9.1
Opensuse4 products
  • opensc&distro=openSUSE Leap 15.5< 0.22.0-150400.3.9.1
  • opensc&distro=openSUSE Leap 15.6< 0.22.0-150600.11.6.1
  • opensc&distro=openSUSE Leap Micro 5.3< 0.22.0-150400.3.9.1
  • opensc&distro=openSUSE Leap Micro 5.4< 0.22.0-150400.3.9.1
Debian1 product
  • opensc< 0.23.0-0.3+deb12u2 | < 0.25.0~rc1-1
Mageia1 product
  • opensc< 0.25.0-1.mga9
Opensc_project1 product
Ubuntu1 product
  • opensc< 0.22.0-1ubuntu2+esm1

7 vendors · 32 products

References

29 links
Show all 29 references