Side-Channel Attack

🗓️ 01 Nov 2018 03:10:27Reported by Veracode Vulnerability DatabaseType

libgnutls.so vulnerable to plain text recovery via cache-based side channe

Reporter	Title	Published	Views	Family All 86
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is aware of a GnuTLS vulnerability	19 Feb 201920:20	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities have been fixed in IBM Security Privileged Identity Manager Appliance.	17 Sep 201915:34	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in GnuTLS affects IBM Watson Studio Local	18 Dec 201917:54	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in GnuTLS affect PowerKVM	17 Dec 201814:20	–	ibm
Tenable Nessus	Amazon Linux 2 : gnutls (ALAS-2018-1120)	10 Dec 201800:00	–	nessus
Tenable Nessus	CentOS 7 : gnutls (CESA-2018:3050)	17 Dec 201800:00	–	nessus
Tenable Nessus	Debian DLA-1560-1 : gnutls28 security update	31 Oct 201800:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP5 : gnutls (EulerOS-SA-2019-1676)	2 Jul 201900:00	–	nessus
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.2.0 : gnutls (EulerOS-SA-2019-1693)	9 Jul 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP2 : gnutls (EulerOS-SA-2019-1743)	22 Jul 201900:00	–	nessus

Vulners

Node

libgnutls.so libgnutls.soRange28.41.16–28.43.3cpp

gnu gnutlsMatch3.3.26_9.el7

Source	Link
github	www.github.com/gnutls/gnutls/commit/ce671a6db9e47006cff152d485091141b1569f39
securityfocus	www.securityfocus.com/bid/105138
lists	www.lists.debian.org/debian-lts-announce/2018/10/msg00022.html
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/ILMOWPKMTZAIMK5F32TUMO34XCABUCFJ/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/WDYY3R4F5CUTFAMXH2C5NKYFVDEJLTT7/
access	www.access.redhat.com/security/cve/CVE-2018-10846
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
eprint	www.eprint.iacr.org/2018/747
gitlab	www.gitlab.com/gnutls/gnutls/merge_requests/657

13 Feb 2023 07:14Current

5.6Medium risk

Vulners AI Score5.6

CVSS 35.3 - 5.6

CVSS 21.9

EPSS0.00019