The DTLS implementation in GnuTLS 3.0.10 and earlier executes certain error-handling code only if there is a specific relationship between a padding length and the ciphertext size, which makes it easier for remote attackers to recover partial plaintext via a timing side-channel attack, a related issue to CVE-2011-4108.

This update of GnuTLS fixes a vulnerability in the DTLS implementation which could allow remote attackers to recover partial plaintext via a timing side-channel attack. (CVE-2012-0390).

Fix GnuTLS DTLS plaintext recovery attack

This update of GnuTLS fixes multiple vulnerabilities :

  - remote attackers could cause a denial of service (heap     memory corruption and application crash) via an issue in     the asn1_get_length_der() function. (CVE-2012-1569)

  - crafted GenericBlockCipher structures allow remote     attackers to cause a denial of service (heap memory     corruption and application crash). (CVE-2012-1573)

  - A vulnerability in the DTLS implementation which could     allow remote attackers to recover partial plaintext via     a timing side-channel attack was fixed. (CVE-2012-0390)

In addition, support for customizing the signing function was added.

This update of GnuTLS fixes multiple vulnerabilities :

  - remote attackers could cause a denial of service (heap     memory corruption and application crash) via an issue in     the asn1_get_length_der() function. (CVE-2012-1569)

  - crafted GenericBlockCipher structures allow remote     attackers to cause a denial of service (heap memory     corruption and application crash). (CVE-2012-1573)

  - A vulnerability in the DTLS implementation which could     allow remote attackers to recover partial plaintext via     a timing side-channel attack was fixed. (CVE-2012-0390)

ID	Name	Product	Family	Severity
75856	openSUSE Security Update : gnutls (openSUSE-SU-2012:0344-1)	Nessus	SuSE Local Security Checks	medium
74550	openSUSE Security Update : gnutls (openSUSE-2012-121)	Nessus	SuSE Local Security Checks	medium
64152	SuSE 11.1 Security Update : GnuTLS (SAT Patch Number 6448)	Nessus	SuSE Local Security Checks	medium
59829	SuSE 10 Security Update : GnuTLS (ZYPP Patch Number 8066)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2012-0390

high

Tenable Plugins

medium

medium

medium

medium