5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.862 High
EPSS
Percentile
98.5%
CentOS Errata and Security Advisory CESA-2013:0883
The GnuTLS library provides support for cryptographic algorithms and for
protocols such as Transport Layer Security (TLS).
It was discovered that the fix for the CVE-2013-1619 issue released via
RHSA-2013:0588 introduced a regression in the way GnuTLS decrypted TLS/SSL
encrypted records when CBC-mode cipher suites were used. A remote attacker
could possibly use this flaw to crash a server or client application that
uses GnuTLS. (CVE-2013-2116)
Users of GnuTLS are advised to upgrade to these updated packages, which
correct this issue. For the update to take effect, all applications linked
to the GnuTLS library must be restarted.
Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2013-May/081928.html
https://lists.centos.org/pipermail/centos-announce/2013-May/081929.html
Affected packages:
gnutls
gnutls-devel
gnutls-guile
gnutls-utils
Upstream details at:
https://access.redhat.com/errata/RHSA-2013:0883
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
CentOS | 5 | i386 | gnutls | < 1.4.1-10.el5_9.2 | gnutls-1.4.1-10.el5_9.2.i386.rpm |
CentOS | 5 | i386 | gnutls-devel | < 1.4.1-10.el5_9.2 | gnutls-devel-1.4.1-10.el5_9.2.i386.rpm |
CentOS | 5 | i386 | gnutls-utils | < 1.4.1-10.el5_9.2 | gnutls-utils-1.4.1-10.el5_9.2.i386.rpm |
CentOS | 5 | i386 | gnutls | < 1.4.1-10.el5_9.2 | gnutls-1.4.1-10.el5_9.2.i386.rpm |
CentOS | 5 | x86_64 | gnutls | < 1.4.1-10.el5_9.2 | gnutls-1.4.1-10.el5_9.2.x86_64.rpm |
CentOS | 5 | i386 | gnutls-devel | < 1.4.1-10.el5_9.2 | gnutls-devel-1.4.1-10.el5_9.2.i386.rpm |
CentOS | 5 | x86_64 | gnutls-devel | < 1.4.1-10.el5_9.2 | gnutls-devel-1.4.1-10.el5_9.2.x86_64.rpm |
CentOS | 5 | x86_64 | gnutls-utils | < 1.4.1-10.el5_9.2 | gnutls-utils-1.4.1-10.el5_9.2.x86_64.rpm |
CentOS | 6 | i686 | gnutls | < 2.8.5-10.el6_4.2 | gnutls-2.8.5-10.el6_4.2.i686.rpm |
CentOS | 6 | i686 | gnutls-devel | < 2.8.5-10.el6_4.2 | gnutls-devel-2.8.5-10.el6_4.2.i686.rpm |