challenge_CVE-2020-13777

Reto CVE-2020-13777 Intenta demostrar si el MITM de TLS 1.3 es posible y descifra los datos tempranos 0-RTT en el pcap aquí Servidor: 192.168.100.23:5556. Consulta https://jovi0608.hatenablog.com/entry/2020/06/13/104905 y CVE-2020-13777 para más detalles...

PoC_TLS1_3_CVE-2020-13777

PoC TLS1.3 CVE-2020-13777 此PoC的目的 此PoC及相关文章是为申请 "Challenge CVE-2020-13777" 项目而创建的。 CVE-2020-13777 是一个GnuTLS漏洞，其补丁已广泛分发。 此PoC旨在帮助提高信息和通信行业相关人员的信息安全素养。 通过广泛公开PoC和技术验证结果，我们希望这一漏洞能被信息和通信行业的相关人员公开认知。 此PoC的目的 相关文章及为企划"Challenge CVE-2020-13777"提供的解说文章和PoC旨在为信息通信行业相关人员的信息安全素养提升做出贡献。...

MiracleLinux 8 : gnutls-3.6.8-11.el8 (AXSA:2020-604:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2020-604:01 advisory. gnutls: session resumption works without master key allowing MITM CVE-2020-13777 Tenable has extracted the preceding description block directly from the...

Alibaba Cloud Linux 3 : 0008: gnutls (ALINUX3-SA-2021:0008)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2021:0008 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2019-3829: A vulnerability was found i...

CVE-2020-13777 affecting package gnutls 3.6.8-

CVE-2020-13777 affecting package gnutls 3.6.8-. An upgraded version of the package is available that resolves this issue...

Huawei EulerOS: Security Advisory for gnutls (EulerOS-SA-2020-1803)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 8 : gnutls (ELSA-2020-2637)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-2637 advisory. 3.6.8-11 - Fix CVE-2020-13777 1844147 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus h...

Important: Red Hat Security Advisory: gnutls security update

An update for gnutls is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Important: Red Hat Security Advisory: gnutls security update

An update for gnutls is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Important: Red Hat Security Advisory: gnutls security update

An update for gnutls is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

RHEL 8 : gnutls (RHSA-2020:2638)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2638 advisory. The gnutls packages provide the GNU Transport Layer Security GnuTLS library, which implements cryptographic algorithms and protocols such as SSL, TLS...

RHEL 8 : gnutls (RHSA-2020:2637)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2637 advisory. The gnutls packages provide the GNU Transport Layer Security GnuTLS library, which implements cryptographic algorithms and protocols such as SSL, TLS...

gnutls security update

3.6.8-11 - Fix CVE-2020-13777 1844147...

Exploit for Use of a Broken or Risky Cryptographic Algorithm in Gnu Gnutls

PoC TLS1.3 CVE-2020-13777 Purpose of this PoC This PoC an...

Updated gnutls packages fix security vulnerability

Updated gnutls packages fix security vulnerability: It was found that GnuTLS 3.6.4 introduced a regression in the TLS protocol implementation. This caused the TLS server to not securely construct a session ticket encryption key considering the application supplied secret, allowing a MitM attacker...

SUSE SLED15 / SLES15 Security Update : gnutls (SUSE-SU-2020:1584-1)

This update for gnutls fixes the following issues : CVE-2020-13777: Fixed an insecure session ticket key construction which could have made the TLS server to not bind the session ticket encryption key with a value supplied by the application until the initial key rotation, allowing an attacker to...

Fedora 32 : mingw-gnutls (2020-4f78f122a3)

Update to upstream 3.6.14 release, and security fix for CVE-2020-13777. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introduci...

Fedora 31 : gnutls (2020-76b705bb63)

Update to upstream 3.6.14 release, and security fix for CVE-2020-13777. ---- - Fix certificate chain validation involving the expired 'AddTrust External Root'. - Disable RSA blinding during FIPS self-tests to avoid hanging if there is not enough entropy for getrandom - Add --waitresumption option...

Fedora 31 : mingw-gnutls (2020-ea11cb5ccc)

Update to upstream 3.6.14 release, and security fix for CVE-2020-13777. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introduci...

openSUSE Security Update : gnutls (openSUSE-2020-790)

This update for gnutls fixes the following issues : - CVE-2020-13777: Fixed an insecure session ticket key construction which could have made the TLS server to not bind the session ticket encryption key with a value supplied by the application until the initial key rotation, allowing an attacker ...