Side Channel Attack

🗓️ 01 Dec 2023 09:22:24Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 27 Views

Vulnerable libgnutls.so to Side Channel Attack

Reporter	Title	Published	Views	Family All 221
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to an Observable Discrepancy in the RHEL UBI (CVE-2023-5981)	5 Aug 202421:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from go-yaml, OpenSSL, GnuTLS , OpenTelemetry-Go, go-toolset and urllib3	30 Jan 202408:15	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM webMethods API Management	25 Apr 202510:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by multiple Linux Kernel vulnerabilities	15 May 202417:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM webMethods Managed File Transfer	25 Apr 202510:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Technical Support Appliance - possible exposure of sensitive information	21 Nov 202421:35	–	ibm
IBM Security Bulletins	Security Bulletin: App Connect Enterprise Certified Container UBI updates	7 Mar 202414:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Observability with Instana (OnPrem) is affected by Multiple Security Vulnerabilities	30 May 202411:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Appliance is vulnerable to exposure of sensitive information (CVE-2023-5981 and CVE-2024-0533)	5 Sep 202416:23	–	ibm
Tenable Nessus	Amazon Linux 2023 : gnutls, gnutls-c++, gnutls-dane (ALAS2023-2024-463)	8 Jan 202400:00	–	nessus

Vulners

Node

gnu gnutlsMatch3.8.1-r0cpp

AND

alpinelinux alpine_linuxMatch3.19

gnu gnutlsMatch3.7.0-r0cpp

AND

gnu gnutlsMatch3.8.0-r3cpp

AND

gnu gnutlsMatch3.8.0-r4cpp

AND

gnu gnutlsMatch3.7.8-r0cpp

AND

gnu gnutlsMatch3.7.8-r1cpp

AND

gnu gnutlsMatch3.8.0-r2cpp

AND

gnu gnutlsMatch3.7.1-r0cpp

AND

gnu gnutlsMatch3.8.1-r0cpp

AND

gnu gnutlsMatch3.6.13-r0cpp

AND

gnu gnutlsMatch3.6.12-r0cpp

AND

gnu gnutlsMatch3.8.0-r1cpp

AND

gnu gnutlsMatch3.7.7-r1cpp

AND

gnu gnutlsMatch3.7.6-r0cpp

AND

gnu gnutlsMatch3.7.7-r0cpp

AND

gnu gnutlsMatch3.7.5-r0cpp

AND

gnu gnutlsMatch3.7.4-r0cpp

AND

gnu gnutlsMatch3.7.8-r2cpp

AND

gnu gnutlsMatch3.7.3-r0cpp

AND

gnu gnutlsMatch3.8.0-r0cpp

AND

alpinelinux alpine_linuxMatchedge

gnu gnutlsMatch3.8.0-r2cpp

AND

alpinelinux alpine_linuxMatch3.18

libgnutls.so libgnutls.soRange30.27.0.debug–30.36.0cpp

Source	Link
github	www.github.com/gnutls/gnutls/commit/bc09ff9e5167586bbd6998591feef29973ea0ba1
gitlab	www.gitlab.com/gnutls/gnutls/-/commit/bc09ff9e5167586bbd6998591feef29973ea0ba1
bugzilla	www.bugzilla.suse.com/show_bug.cgi
access	www.access.redhat.com/security/cve/CVE-2023-5981
github	www.github.com/advisories/GHSA-jvj3-gqjm-cg8p
gnutls	www.gnutls.org/security-new.html
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/7ZEIOLORQ7N6WRPFXZSYDL2MC4LP7VFV/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/GNXKVR5YNUEBNHAHM5GSYKBZX4W2HMN2/
openwall	www.openwall.com/lists/oss-security/2024/01/19/3
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

27 Jun 2024 17:49Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.15.9

EPSS0.01257