Lucene search

K
cvelistRedhatCVELIST:CVE-2018-10846
HistoryAug 22, 2018 - 1:00 p.m.

CVE-2018-10846

2018-08-2213:00:00
CWE-385
redhat
raw.githubusercontent.com

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.3%

A cache-based side channel in GnuTLS implementation that leads to plain text recovery in cross-VM attack setting was found. An attacker could use a combination of “Just in Time” Prime+probe attack in combination with Lucky-13 attack to recover plain text using crafted packets.