The flaw exists in libgnutls; a remote attacker can send an extremely short premaster secret during an RSA key exchange to a server that uses an RSA key protected by a PKCS#11 token. This causes a short heap overread, corrupting memory and allowing the attacker to read data that should not be exposed. The main consequence is the potential leakage of sensitive information such as session keys or other memory contents.

Red Hat Enterprise Linux 10, 6, 7, 8, 9, Red Hat Hardened Images, and Red Hat OpenShift Container Platform 4 are affected. Any system that uses libgnutls with an RSA key backed by a PKCS#11 token for TLS connections is vulnerable.

The CVSS score of 8.2 reflects a high severity for information disclosure. The EPSS score is not available, and the vulnerability is not listed in CISA KEV, suggesting a lower likelihood of widespread exploitation at this time. The attack requires a network connection to the vulnerable server and the presence of an RSA key with PKCS#11 token support. If an exploit were crafted, it would be remotely triggered during the TLS handshake, potentially exposing confidential data.