Rapid7 Vulnerability & Exploit Database

Oracle Linux: CVE-2023-52323: ELSA-2024-2132: fence-agents security and bug fix update (MODERATE) (Multiple Advisories)

Free InsightVM Trial No Credit Card Necessary
2024 Attack Intel Report Latest research by Rapid7 Labs
Back to Search

Oracle Linux: CVE-2023-52323: ELSA-2024-2132: fence-agents security and bug fix update (MODERATE) (Multiple Advisories)

Severity
5
CVSS
(AV:N/AC:H/Au:N/C:C/I:N/A:N)
Published
01/05/2024
Created
05/22/2024
Added
05/07/2024
Modified
07/22/2024

Description

PyCryptodome and pycryptodomex before 3.19.1 allow side-channel leakage for OAEP decryption, exploitable for a Manger attack. A flaw was found in PyCryptodome/pycryptodomex which may allow for side-channel leakage when performing OAEP decryption, which could be exploited to carry out a Manger attack.

Solution(s)

  • oracle-linux-upgrade-fence-agents-all
  • oracle-linux-upgrade-fence-agents-amt-ws
  • oracle-linux-upgrade-fence-agents-apc
  • oracle-linux-upgrade-fence-agents-apc-snmp
  • oracle-linux-upgrade-fence-agents-bladecenter
  • oracle-linux-upgrade-fence-agents-brocade
  • oracle-linux-upgrade-fence-agents-cisco-mds
  • oracle-linux-upgrade-fence-agents-cisco-ucs
  • oracle-linux-upgrade-fence-agents-common
  • oracle-linux-upgrade-fence-agents-compute
  • oracle-linux-upgrade-fence-agents-drac5
  • oracle-linux-upgrade-fence-agents-eaton-snmp
  • oracle-linux-upgrade-fence-agents-emerson
  • oracle-linux-upgrade-fence-agents-eps
  • oracle-linux-upgrade-fence-agents-heuristics-ping
  • oracle-linux-upgrade-fence-agents-hpblade
  • oracle-linux-upgrade-fence-agents-ibmblade
  • oracle-linux-upgrade-fence-agents-ibm-powervs
  • oracle-linux-upgrade-fence-agents-ibm-vpc
  • oracle-linux-upgrade-fence-agents-ifmib
  • oracle-linux-upgrade-fence-agents-ilo2
  • oracle-linux-upgrade-fence-agents-ilo-moonshot
  • oracle-linux-upgrade-fence-agents-ilo-mp
  • oracle-linux-upgrade-fence-agents-ilo-ssh
  • oracle-linux-upgrade-fence-agents-intelmodular
  • oracle-linux-upgrade-fence-agents-ipdu
  • oracle-linux-upgrade-fence-agents-ipmilan
  • oracle-linux-upgrade-fence-agents-kdump
  • oracle-linux-upgrade-fence-agents-kubevirt
  • oracle-linux-upgrade-fence-agents-lpar
  • oracle-linux-upgrade-fence-agents-mpath
  • oracle-linux-upgrade-fence-agents-redfish
  • oracle-linux-upgrade-fence-agents-rhevm
  • oracle-linux-upgrade-fence-agents-rsa
  • oracle-linux-upgrade-fence-agents-rsb
  • oracle-linux-upgrade-fence-agents-sbd
  • oracle-linux-upgrade-fence-agents-scsi
  • oracle-linux-upgrade-fence-agents-virsh
  • oracle-linux-upgrade-fence-agents-vmware-rest
  • oracle-linux-upgrade-fence-agents-vmware-soap
  • oracle-linux-upgrade-fence-agents-wti
  • oracle-linux-upgrade-fence-virt
  • oracle-linux-upgrade-fence-virtd
  • oracle-linux-upgrade-fence-virtd-cpg
  • oracle-linux-upgrade-fence-virtd-libvirt
  • oracle-linux-upgrade-fence-virtd-multicast
  • oracle-linux-upgrade-fence-virtd-serial

References

insightVM

Advanced vulnerability management analytics and reporting.
Key Features
Free InsightVM Trial View All Features

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;