GnuTLS 3.6.x before 3.6.13 uses incorrect cryptography for DTLS. The earliest affected version is 3.6.3 (2018-07-16) because of an error in a 2017-10-06 commit. The DTLS client always uses 32 '\0' bytes instead of a random value, and thus contributes no randomness to a DTLS negotiation. This breaks the security guarantees of the DTLS protocol.

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2020:0948-2 advisory.

  - GnuTLS 3.6.x before 3.6.13 uses incorrect cryptography for DTLS. The earliest affected version is 3.6.3     (2018-07-16) because of an error in a 2017-10-06 commit. The DTLS client always uses 32 '\0' bytes instead     of a random value, and thus contributes no randomness to a DTLS negotiation. This breaks the security     guarantees of the DTLS protocol. (CVE-2020-11501)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:1998 advisory.

  - gnutls: DTLS client hello contains a random value of all zeroes (CVE-2020-11501)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the gnutls package has been released.

According to the versions of the gnutls packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - GnuTLS 3.6.x before 3.6.13 uses incorrect cryptography     for DTLS. The earliest affected version is 3.6.3     (2018-07-16) because of an error in a 2017-10-06     commit. The DTLS client always uses 32 '\0' bytes     instead of a random value, and thus contributes no     randomness to a DTLS negotiation. This breaks the     security guarantees of the DTLS     protocol.(CVE-2020-11501)

  - GnuTLS 3.6.x before 3.6.14 uses incorrect cryptography     for encrypting a session ticket (a loss of     confidentiality in TLS 1.2, and an authentication     bypass in TLS 1.3). The earliest affected version is     3.6.4 (2018-09-24) because of an error in a 2018-09-18     commit. Until the first key rotation, the TLS server     always uses wrong data in place of an encryption key     derived from an application.(CVE-2020-13777)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - GnuTLS 3.6.x before 3.6.14 uses incorrect cryptography     for encrypting a session ticket (a loss of     confidentiality in TLS 1.2, and an authentication     bypass in TLS 1.3). The earliest affected version is     3.6.4 (2018-09-24) because of an error in a 2018-09-18     commit. Until the first key rotation, the TLS server     always uses wrong data in place of an encryption key     derived from an application.(CVE-2020-13777)

  - GnuTLS 3.6.x before 3.6.13 uses incorrect cryptography     for DTLS. The earliest affected version is 3.6.3     (2018-07-16) because of an error in a 2017-10-06     commit. The DTLS client always uses 32 '\0' bytes     instead of a random value, and thus contributes no     randomness to a DTLS negotiation. This breaks the     security guarantees of the DTLS     protocol.(CVE-2020-11501)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote NewStart CGSL host, running version MAIN 6.01, has gnutls packages installed that are affected by a vulnerability:

  - GnuTLS 3.6.x before 3.6.13 uses incorrect cryptography     for DTLS. The earliest affected version is 3.6.3     (2018-07-16) because of an error in a 2017-10-06 commit.
    The DTLS client always uses 32 '\0' bytes instead of a     random value, and thus contributes no randomness to a     DTLS negotiation. This breaks the security guarantees of     the DTLS protocol. (CVE-2020-11501)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

From Red Hat Security Advisory 2020:1998 :

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1998 advisory.

  - gnutls: DTLS client hello contains a random value of all     zeroes (CVE-2020-11501)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

https://lists.gnupg.org/pipermail/gnutls-help/2020-March/004642.html

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1998 advisory.

  - gnutls: DTLS client hello contains a random value of all zeroes (CVE-2020-11501)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for gmp, gnutls, libnettle fixes the following issues :

Security issue fixed :

  - CVE-2020-11501: Fixed zero random value in DTLS client     hello (bsc#1168345)

FIPS related bugfixes :

  - FIPS: Install checksums for binary integrity     verification which are required when running in FIPS     mode (bsc#1152692, jsc#SLE-9518)

  - FIPS: Fixed a cfb8 decryption issue, no longer truncate     output IV if input is shorter than block size.
    (bsc#1166881)

  - FIPS: Added Diffie Hellman public key verification test.
    (bsc#1155327)

This update was imported from the SUSE:SLE-15:Update update project.

This update for gmp, gnutls, libnettle fixes the following issues :

Security issue fixed :

CVE-2020-11501: Fixed zero random value in DTLS client hello (bsc#1168345)

FIPS related bugfixes: FIPS: Install checksums for binary integrity verification which are required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)

FIPS: Fixed a cfb8 decryption issue, no longer truncate output IV if input is shorter than block size. (bsc#1166881)

FIPS: Added Diffie Hellman public key verification test. (bsc#1155327)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that GnuTLS incorrectly handled randomness when performing DTLS negotiation. A remote attacker could possibly use this issue to obtain sensitive information, contrary to expectations.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A flaw was reported in the DTLS protocol implementation in GnuTLS, a library implementing the TLS and SSL protocols. The DTLS client would not contribute any randomness to the DTLS negotiation, breaking the security guarantees of the DTLS protocol.

The GnuTLS project reports :

It was found that GnuTLS 3.6.3 introduced a regression in the DTLS protocol implementation. This caused the DTLS client to not contribute any randomness to the DTLS negotiation breaking the security guarantees of the DTLS protocol.

ID	Name	Product	Family	Severity
163266	SUSE SLES15 Security Update : gmp, gnutls, libnettle (SUSE-SU-2020:0948-2)	Nessus	SuSE Local Security Checks	high
145947	CentOS 8 : gnutls (CESA-2020:1998)	Nessus	CentOS Local Security Checks	high
140714	Photon OS 2.0: Gnutls PHSA-2020-2.0-0285	Nessus	PhotonOS Local Security Checks	high
140710	Photon OS 1.0: Gnutls PHSA-2020-1.0-0324	Nessus	PhotonOS Local Security Checks	high
140002	EulerOS Virtualization for ARM 64 3.0.6.0 : gnutls (EulerOS-SA-2020-1899)	Nessus	Huawei Local Security Checks	high
139133	EulerOS 2.0 SP8 : gnutls (EulerOS-SA-2020-1803)	Nessus	Huawei Local Security Checks	high
138777	NewStart CGSL MAIN 6.01 : gnutls Vulnerability (NS-SA-2020-0033)	Nessus	NewStart CGSL Local Security Checks	high
136447	Oracle Linux 8 : gnutls (ELSA-2020-1998)	Nessus	Oracle Linux Local Security Checks	high
136416	Fedora 31 : mingw-gnutls (2020-d14280a6e8)	Nessus	Fedora Local Security Checks	high
136187	RHEL 8 : gnutls (RHSA-2020:1998)	Nessus	Red Hat Local Security Checks	high
135792	Photon OS 3.0: Gnutls PHSA-2020-3.0-0080	Nessus	PhotonOS Local Security Checks	high
135449	openSUSE Security Update : gmp / gnutls / libnettle (openSUSE-2020-501)	Nessus	SuSE Local Security Checks	high
135387	SUSE SLED15 / SLES15 Security Update : gmp, gnutls, libnettle (SUSE-SU-2020:0948-1)	Nessus	SuSE Local Security Checks	high
135283	Ubuntu 19.10 : gnutls28 vulnerability (USN-4322-1)	Nessus	Ubuntu Local Security Checks	high
135207	Debian DSA-4652-1 : gnutls28 - security update	Nessus	Debian Local Security Checks	high
135110	FreeBSD : GnuTLS -- flaw in DTLS protocol implementation (d887b3d9-7366-11ea-b81a-001cc0382b2f)	Nessus	FreeBSD Local Security Checks	high

Detections

Analytics

CVE-2020-11501

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high