PoC_TLS1_3_CVE-2020-13777

PoC TLS1.3 CVE-2020-13777 الغرض من هذا الـ PoC تم إنشاء هذا الـ PoC والمقالة ذات الصلة للتقديم على مشروع «Challenge CVE-2020-13777». CVE-2020-13777 هو ثغرة أمنية في GnuTLS تم توزيع التصحيح الخاص بها على نطاق واسع. يهدف هذا الـ PoC إلى المساهمة في تحسين الثقافة الأمنية للمعلومات لدى الأشخاص العامل...

challenge_CVE-2020-13777

Sfida CVE-2020-13777 Prova a dimostrare se è possibile un MITM TLS 1.3 e decifrare i dati early data 0-RTT in pcap qui Server: 192.168.100.23:5556. Vedi https://jovi0608.hatenablog.com/entry/2020/06/13/104905 e CVE-2020-13777 per i dettagli...

MiracleLinux 8 : gnutls-3.6.8-11.el8 (AXSA:2020-604:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2020-604:01 advisory. gnutls: session resumption works without master key allowing MITM CVE-2020-13777 Tenable has extracted the preceding description block directly from the...

Alibaba Cloud Linux 3 : 0008: gnutls (ALINUX3-SA-2021:0008)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2021:0008 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2019-3829: A vulnerability was found i...

CVE-2020-13777 affecting package gnutls 3.6.8-

CVE-2020-13777 affecting package gnutls 3.6.8-. An upgraded version of the package is available that resolves this issue...

Huawei EulerOS: Security Advisory for gnutls (EulerOS-SA-2020-1803)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 8 : gnutls (ELSA-2020-2637)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-2637 advisory. 3.6.8-11 - Fix CVE-2020-13777 1844147 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus h...

Important: Red Hat Security Advisory: gnutls security update

An update for gnutls is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Important: Red Hat Security Advisory: gnutls security update

An update for gnutls is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Important: Red Hat Security Advisory: gnutls security update

An update for gnutls is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

RHEL 8 : gnutls (RHSA-2020:2638)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2638 advisory. The gnutls packages provide the GNU Transport Layer Security GnuTLS library, which implements cryptographic algorithms and protocols such as SSL, TLS...

RHEL 8 : gnutls (RHSA-2020:2637)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2637 advisory. The gnutls packages provide the GNU Transport Layer Security GnuTLS library, which implements cryptographic algorithms and protocols such as SSL, TLS...

gnutls security update

3.6.8-11 - Fix CVE-2020-13777 1844147...

Exploit for Use of a Broken or Risky Cryptographic Algorithm in Gnu Gnutls

PoC TLS1.3 CVE-2020-13777 Purpose of this PoC This PoC an...

Updated gnutls packages fix security vulnerability

Updated gnutls packages fix security vulnerability: It was found that GnuTLS 3.6.4 introduced a regression in the TLS protocol implementation. This caused the TLS server to not securely construct a session ticket encryption key considering the application supplied secret, allowing a MitM attacker...

SUSE SLED15 / SLES15 Security Update : gnutls (SUSE-SU-2020:1584-1)

This update for gnutls fixes the following issues : CVE-2020-13777: Fixed an insecure session ticket key construction which could have made the TLS server to not bind the session ticket encryption key with a value supplied by the application until the initial key rotation, allowing an attacker to...

Fedora 32 : mingw-gnutls (2020-4f78f122a3)

Update to upstream 3.6.14 release, and security fix for CVE-2020-13777. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introduci...

Fedora 31 : gnutls (2020-76b705bb63)

Update to upstream 3.6.14 release, and security fix for CVE-2020-13777. ---- - Fix certificate chain validation involving the expired 'AddTrust External Root'. - Disable RSA blinding during FIPS self-tests to avoid hanging if there is not enough entropy for getrandom - Add --waitresumption option...

Fedora 31 : mingw-gnutls (2020-ea11cb5ccc)

Update to upstream 3.6.14 release, and security fix for CVE-2020-13777. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introduci...

openSUSE Security Update : gnutls (openSUSE-2020-790)

This update for gnutls fixes the following issues : - CVE-2020-13777: Fixed an insecure session ticket key construction which could have made the TLS server to not bind the session ticket encryption key with a value supplied by the application until the initial key rotation, allowing an attacker ...