Lucene search
+L

2 matches found

OSV
OSV
added 2024/03/26 8:0 a.m.8 views

MGASA-2024-0089 Updated gnutls packages fix security vulnerabilities

The Minerva attack is a cryptographic vulnerability that exploits deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such as when using the GNUTLSPRIVKEYFLAGREPRODUCIBLE flag, it can result in a noticeable step in nonce size from 513 to 512 bits,...

5.3CVSS5.2AI score0.00718EPSS
SaveExploits0References3
OSV
OSV
added 2017/07/22 9:36 a.m.14 views

MGASA-2017-0212 Updated gnutls packages fix security vulnerabilities

GnuTLS before 2017-02-20 has an out-of-bounds write caused by an integer overflow and heap-based buffer overflow related to the cdkpktread function in opencdk/read-packet.c. This issue which is a subset of the vendor's GNUTLS-SA-2017-3 report is fixed in 3.5.10. CVE-2017-7869 GnuTLS version 3.5.1...

7.5CVSS7.5AI score0.0341EPSS
SaveExploits0References5
Rows per page
Query Builder