A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure. This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack.

An update of the gnutls package has been released.

The version of gnutls installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-0567 advisory.

  - A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with     distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure.
    This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack.
    (CVE-2024-0567)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A vulnerability was found in GnuTLS. The response times to malformed ciphertexts in RSA-PSK     ClientKeyExchange differ from the response times of ciphertexts with correct PKCS#1 v1.5 padding. This     issue may allow a remote attacker to perform a timing side-channel attack in the RSA-PSK key exchange,     potentially leading to the leakage of sensitive data. CVE-2024-0553 is designated as an incomplete     resolution for CVE-2023-5981.(CVE-2024-0553)

    A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with     distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure.
    This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service     attack.(CVE-2024-0567)

Tenable has extracted the preceding description block directly from the EulerOS gnutls security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A vulnerability was found in GnuTLS. The response times to malformed ciphertexts in RSA-PSK     ClientKeyExchange differ from the response times of ciphertexts with correct PKCS#1 v1.5 padding. This     issue may allow a remote attacker to perform a timing side-channel attack in the RSA-PSK key exchange,     potentially leading to the leakage of sensitive data. CVE-2024-0553 is designated as an incomplete     resolution for CVE-2023-5981. (CVE-2024-0553)

  - A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with     distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure.
    This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack.
    (CVE-2024-0567)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0638-2 advisory.

  - A vulnerability was found in GnuTLS. The response times to malformed ciphertexts in RSA-PSK     ClientKeyExchange differ from the response times of ciphertexts with correct PKCS#1 v1.5 padding. This     issue may allow a remote attacker to perform a timing side-channel attack in the RSA-PSK key exchange,     potentially leading to the leakage of sensitive data. CVE-2024-0553 is designated as an incomplete     resolution for CVE-2023-5981. (CVE-2024-0553)

  - A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with     distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure.
    This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack.
    (CVE-2024-0567)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12336 advisory.

    [3.7.6-23.4_fips]
    - Add FIPS package change: add fips suffix to Release and       set Epoch to 10 [Orabug: 35925409]
    - Update FIPS module name for Oracle Linux [Orabug: 35925409]
    - Verify salt length and iteration count for PBKDF [Orabug: 35925409]

    [3.7.6-23.4]
    - Fix timing side-channel in deterministic ECDSA (RHEL-28958)
    - Fix potential crash during chain building/verification (RHEL-28953)

    [3.7.6-23.3]
    - x509: detect loop in certificate chain (RHEL-21759)
    - fips: Zeroize temporary values in integrity check (RHEL-21870)

    [3.7.6-23.2]
    - auth/rsa_psk: minimize branching after decryption

    [3.7.6-23.1]
    - auth/rsa_psk: side-step potential side-channel (RHEL-16755)

    [3.7.6-23]
    - Mark SHA-1 signature verification non-approved in FIPS (#2102751)

    [3.7.6-22]
    - Skip KTLS test on old kernel if host and target arches are different

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A vulnerability was found in GnuTLS. The response times to malformed ciphertexts in RSA-PSK     ClientKeyExchange differ from the response times of ciphertexts with correct PKCS#1 v1.5 padding. This     issue may allow a remote attacker to perform a timing side-channel attack in the RSA-PSK key exchange,     potentially leading to the leakage of sensitive data. CVE-2024-0553 is designated as an incomplete     resolution for CVE-2023-5981. (CVE-2024-0553)

  - A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with     distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure.
    This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack.
    (CVE-2024-0567)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1082 advisory.

    The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements     cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

    Security Fix(es):

    * gnutls: incomplete fix for CVE-2023-5981 (CVE-2024-0553)

    * gnutls: rejects certificate chain with distributed trust (CVE-2024-0567)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0638-1 advisory.

  - A vulnerability was found in GnuTLS. The response times to malformed ciphertexts in RSA-PSK     ClientKeyExchange differ from the response times of ciphertexts with correct PKCS#1 v1.5 padding. This     issue may allow a remote attacker to perform a timing side-channel attack in the RSA-PSK key exchange,     potentially leading to the leakage of sensitive data. CVE-2024-0553 is designated as an incomplete     resolution for CVE-2023-5981. (CVE-2024-0553)

  - A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with     distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure.
    This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack.
    (CVE-2024-0567)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-521 advisory.

    A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with     distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure.
    This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack.
    (CVE-2024-0567)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-c43a6cc3f8 advisory.

    Rebase gnutls to version 3.8.3

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-0533 advisory.

    [3.7.6-23.3]
    - Fixes for CVE-2023-5981, CVE-2024-0553, CVE-2024-0567

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:0533 advisory.

  - A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange     differ from response times of ciphertexts with correct PKCS#1 v1.5 padding. (CVE-2023-5981)

  - A vulnerability was found in GnuTLS. The response times to malformed ciphertexts in RSA-PSK     ClientKeyExchange differ from the response times of ciphertexts with correct PKCS#1 v1.5 padding. This     issue may allow a remote attacker to perform a timing side-channel attack in the RSA-PSK key exchange,     potentially leading to the leakage of sensitive data. CVE-2024-0553 is designated as an incomplete     resolution for CVE-2023-5981. (CVE-2024-0553)

  - A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with     distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure.
    This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack.
    (CVE-2024-0567)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0533 advisory.

    The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements     cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

    Security Fix(es):

    * gnutls: timing side-channel in the RSA-PSK authentication (CVE-2023-5981)

    * gnutls: incomplete fix for CVE-2023-5981 (CVE-2024-0553)

    * gnutls: rejects certificate chain with distributed trust (CVE-2024-0567)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-80428c408c advisory.

    Rebase gnutls to version 3.8.3

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.04 / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6593-1 advisory.

    It was discovered that GnuTLS had a timing side-channel when processing malformed ciphertexts in RSA-PSK     ClientKeyExchange. A remote attacker could possibly use this issue to recover sensitive information.
    (CVE-2024-0553)

    It was discovered that GnuTLS incorrectly handled certain certificate chains with a cross-signing loop. A     remote attacker could possibly use this issue to cause GnuTLS to crash, resulting in a denial of service.
    This issue only affected Ubuntu 22.04 LTS, Ubuntu 23.04, and Ubuntu 23.10. (CVE-2024-0567)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of gnutls installed on the remote host is prior to 3.8.3. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2024-016-01 advisory.

  - A vulnerability was found in GnuTLS. The response times to malformed ciphertexts in RSA-PSK     ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding. This issue     may allow a remote attacker to perform a timing side-channel attack in the RSA-PSK key exchange,     potentially leading to the leakage of sensitive data. CVE-2024-0553 is designated as an incomplete     resolution for CVE-2023-5981. (CVE-2024-0553)

  - A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with     distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure.
    This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack.
    (CVE-2024-0567)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
204344	Photon OS 5.0: Gnutls PHSA-2024-5.0-0195	Nessus	PhotonOS Local Security Checks	high
204337	Photon OS 4.0: Gnutls PHSA-2024-4.0-0556	Nessus	PhotonOS Local Security Checks	high
204115	Photon OS 3.0: Gnutls PHSA-2024-3.0-0717	Nessus	PhotonOS Local Security Checks	high
201777	CBL Mariner 2.0 Security Update: gnutls (CVE-2024-0567)	Nessus	MarinerOS Local Security Checks	high
198213	EulerOS 2.0 SP12 : gnutls (EulerOS-SA-2024-1763)	Nessus	Huawei Local Security Checks	high
198195	EulerOS 2.0 SP12 : gnutls (EulerOS-SA-2024-1740)	Nessus	Huawei Local Security Checks	high
197144	EulerOS Virtualization 2.11.0 : gnutls (EulerOS-SA-2024-1626)	Nessus	Huawei Local Security Checks	high
197129	EulerOS Virtualization 2.11.1 : gnutls (EulerOS-SA-2024-1607)	Nessus	Huawei Local Security Checks	high
196939	SUSE SLES15 Security Update : gnutls (SUSE-SU-2024:0638-2)	Nessus	SuSE Local Security Checks	high
193736	Oracle Linux 9 : gnutls (ELSA-2024-12336)	Nessus	Oracle Linux Local Security Checks	high
191891	EulerOS 2.0 SP11 : gnutls (EulerOS-SA-2024-1235)	Nessus	Huawei Local Security Checks	high
191850	EulerOS 2.0 SP11 : gnutls (EulerOS-SA-2024-1213)	Nessus	Huawei Local Security Checks	high
191539	RHEL 9 : gnutls (RHSA-2024:1082)	Nessus	Red Hat Local Security Checks	high
191077	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : gnutls (SUSE-SU-2024:0638-1)	Nessus	SuSE Local Security Checks	high
190747	Amazon Linux 2023 : gnutls, gnutls-c++, gnutls-dane (ALAS2023-2024-521)	Nessus	Amazon Linux Local Security Checks	high
190325	Fedora 38 : gnutls (2024-c43a6cc3f8)	Nessus	Fedora Local Security Checks	critical
190001	Oracle Linux 9 : gnutls (ELSA-2024-0533)	Nessus	Oracle Linux Local Security Checks	high
189757	AlmaLinux 9 : gnutls (ALSA-2024:0533)	Nessus	Alma Linux Local Security Checks	high
189741	RHEL 9 : gnutls (RHSA-2024:0533)	Nessus	Red Hat Local Security Checks	critical
189728	Fedora 39 : gnutls (2024-80428c408c)	Nessus	Fedora Local Security Checks	critical
189294	Ubuntu 20.04 LTS / 22.04 LTS / 23.04 / 23.10 : GnuTLS vulnerabilities (USN-6593-1)	Nessus	Ubuntu Local Security Checks	high
189071	Slackware Linux 15.0 / current gnutls Multiple Vulnerabilities (SSA:2024-016-01)	Nessus	Slackware Local Security Checks	high

Detections

Analytics

CVE-2024-0567

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

critical

high

high

critical

critical

high

high