Information Exposure

🗓️ 30 Jan 2024 17:22:55Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 31 Views

gnutls vulnerability in RSA-PSK ClientKeyExchange

Reporter	Title	Published	Views	Family All 178
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM webMethods API Management	25 Apr 202510:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation 2.7.2 addresses multiple security vulnerabilities	24 Apr 202415:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from go-git , Golang, GnuTLS, Libxml2, protobuf-c, JSON-java, Libmaxminddb, SQLite3 packages and cryptographic algorithms	1 Mar 202405:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by multiple Linux Kernel vulnerabilities	15 May 202417:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM webMethods Managed File Transfer	25 Apr 202510:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to an Observable Discrepancy in the RHEL UBI (CVE-2024-0553)	5 Aug 202421:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Technical Support Appliance - possible exposure of sensitive information	21 Nov 202421:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Packet Capture includes components with multiple known vulnerabilities	15 Apr 202502:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities	29 Apr 202502:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Observability with Instana (OnPrem) is affected by Multiple Security Vulnerabilities	30 May 202411:23	–	ibm

Vulners

Node

gnu gnutlsMatch3.8.0-r2os

AND

alpinelinux alpine_linuxMatch3.18

OR

gnu gnutlsMatch3.8.1-r0os

AND

alpinelinux alpine_linuxMatch3.19

OR

gnu gnutlsMatch3.8.1-r0os

AND

gnu gnutlsMatch3.7.8-r0os

AND

gnu gnutlsMatch3.7.8-r1os

AND

gnu gnutlsMatch3.7.5-r0os

AND

gnu gnutlsMatch3.8.0-r3os

AND

gnu gnutlsMatch3.7.7-r0os

AND

gnu gnutlsMatch3.7.1-r0os

AND

gnu gnutlsMatch3.7.4-r0os

AND

gnu gnutlsMatch3.7.7-r1os

AND

gnu gnutlsMatch3.8.0-r4os

AND

gnu gnutlsMatch3.8.0-r0os

AND

gnu gnutlsMatch3.7.6-r0os

AND

gnu gnutlsMatch3.6.12-r0os

AND

gnu gnutlsMatch3.8.0-r2os

AND

gnu gnutlsMatch3.7.3-r0os

AND

gnu gnutlsMatch3.7.0-r0os

AND

gnu gnutlsMatch3.8.0-r1os

AND

gnu gnutlsMatch3.7.8-r2os

AND

gnu gnutlsMatch3.6.13-r0os

AND

alpinelinux alpine_linuxMatchedge

Source	Link
secdb	www.secdb.alpinelinux.org/v3.19/main.yaml
secdb	www.secdb.alpinelinux.org/v3.18/main.yaml
secdb	www.secdb.alpinelinux.org/edge/main.yaml
access	www.access.redhat.com/security/cve/CVE-2024-0553
gitlab	www.gitlab.com/gnutls/gnutls/-/issues/1522
lists	www.lists.debian.org/debian-lts-announce/2024/02/msg00010.html
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/7ZEIOLORQ7N6WRPFXZSYDL2MC4LP7VFV/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/GNXKVR5YNUEBNHAHM5GSYKBZX4W2HMN2/
lists	www.lists.gnupg.org/pipermail/gnutls-help/2024-January/004841.html
security	www.security.netapp.com/advisory/ntap-20240202-0011/

27 Jun 2024 17:49Current

7High risk

Vulners AI Score7

CVSS 3.17.5

EPSS0.01028

gnutls vulnerability rsa-psk clientkeyexchange timing side-channel sensitive data information exposure