A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such as when using the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag, it can result in a noticeable step in nonce size from 513 to 512 bits, exposing a potential timing side-channel.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:2889 advisory.

  - gnutls: vulnerable to Minerva side-channel information leak (CVE-2024-28834)

  - gnutls: potential crash during chain building/verification (CVE-2024-28835)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:2570 advisory.

  - A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits     deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such     as when using the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag, it can result in a noticeable step in nonce size     from 513 to 512 bits, exposing a potential timing side-channel. (CVE-2024-28834)

  - A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a     specially crafted .pem bundle using the certtool --verify-chain command. (CVE-2024-28835)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - gnutls: Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification and padding oracle     verification (CVE-2018-16868)

  - gnutls: incomplete fix for CVE-2023-5981 (CVE-2024-0553)

  - GnuTLS before 2017-02-20 has an out-of-bounds write caused by an integer overflow and heap-based buffer     overflow related to the cdk_pkt_read function in opencdk/read-packet.c. This issue (which is a subset of     the vendor's GNUTLS-SA-2017-3 report) is fixed in 3.5.10. (CVE-2017-7869)

  - A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call     memcpy, providing zero-length input may cause undefined behavior. This flaw leads to a denial of service     after authentication in rare circumstances. (CVE-2021-4209)

  - A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during     verification of pkcs7 signatures in gnutls_pkcs7_verify function. (CVE-2022-2509)

  - A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. This     side-channel can be sufficient to recover the key encrypted in the RSA ciphertext across a network in a     Bleichenbacher style attack. To achieve a successful decryption the attacker would need to send a large     amount of specially crafted messages to the vulnerable server. By recovering the secret from the     ClientKeyExchange message, the attacker would be able to decrypt the application data exchanged over that     connection. (CVE-2023-0361)

  - A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange     differ from response times of ciphertexts with correct PKCS#1 v1.5 padding. (CVE-2023-5981)

  - A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with     distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure.
    This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack.
    (CVE-2024-0567)

  - A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits     deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such     as when using the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag, it can result in a noticeable step in nonce size     from 513 to 512 bits, exposing a potential timing side-channel. (CVE-2024-28834)

  - A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a     specially crafted .pem bundle using the certtool --verify-chain command. (CVE-2024-28835)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - gnutls: HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of wrong constant (CVE-2018-10845)

  - gnutls: incomplete fix for CVE-2023-5981 (CVE-2024-0553)

  - GnuTLS before 2017-02-20 has an out-of-bounds write caused by an integer overflow and heap-based buffer     overflow related to the cdk_pkt_read function in opencdk/read-packet.c. This issue (which is a subset of     the vendor's GNUTLS-SA-2017-3 report) is fixed in 3.5.10. (CVE-2017-7869)

  - It was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky thirteen style     attack. Remote attackers could use this flaw to conduct distinguishing attacks and plaintext-recovery     attacks via statistical analysis of timing data using crafted packets. (CVE-2018-10844)

  - A cache-based side channel in GnuTLS implementation that leads to plain text recovery in cross-VM attack     setting was found. An attacker could use a combination of Just in Time Prime+probe attack in combination     with Lucky-13 attack to recover plain text using crafted packets. (CVE-2018-10846)

  - A Bleichenbacher type side-channel based padding oracle attack was found in the way gnutls handles     verification of RSA decrypted PKCS#1 v1.5 data. An attacker who is able to run process on the same     physical core as the victim process, could use this to extract plaintext or in some cases downgrade any     TLS connections to a vulnerable server. (CVE-2018-16868)

  - A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call     memcpy, providing zero-length input may cause undefined behavior. This flaw leads to a denial of service     after authentication in rare circumstances. (CVE-2021-4209)

  - A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. This     side-channel can be sufficient to recover the key encrypted in the RSA ciphertext across a network in a     Bleichenbacher style attack. To achieve a successful decryption the attacker would need to send a large     amount of specially crafted messages to the vulnerable server. By recovering the secret from the     ClientKeyExchange message, the attacker would be able to decrypt the application data exchanged over that     connection. (CVE-2023-0361)

  - A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange     differ from response times of ciphertexts with correct PKCS#1 v1.5 padding. (CVE-2023-5981)

  - A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with     distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure.
    This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack.
    (CVE-2024-0567)

  - A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits     deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such     as when using the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag, it can result in a noticeable step in nonce size     from 513 to 512 bits, exposing a potential timing side-channel. (CVE-2024-28834)

  - A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a     specially crafted .pem bundle using the certtool --verify-chain command. (CVE-2024-28835)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12364 advisory.

  - A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits     deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such     as when using the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag, it can result in a noticeable step in nonce size     from 513 to 512 bits, exposing a potential timing side-channel. (CVE-2024-28834)

  - A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a     specially crafted .pem bundle using the certtool --verify-chain command. (CVE-2024-28835)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-2570 advisory.

  - A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits     deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such     as when using the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag, it can result in a noticeable step in nonce size     from 513 to 512 bits, exposing a potential timing side-channel. (CVE-2024-28834)

  - A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a     specially crafted .pem bundle using the certtool --verify-chain command. (CVE-2024-28835)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:1784 advisory.

  - A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits     deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such     as when using the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag, it can result in a noticeable step in nonce size     from 513 to 512 bits, exposing a potential timing side-channel. (CVE-2024-28834)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:2570 advisory.

  - A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits     deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such     as when using the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag, it can result in a noticeable step in nonce size     from 513 to 512 bits, exposing a potential timing side-channel. (CVE-2024-28834)

  - A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a     specially crafted .pem bundle using the certtool --verify-chain command. (CVE-2024-28835)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 24.04 LTS. host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6733-2 advisory.

  - A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits     deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such     as when using the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag, it can result in a noticeable step in nonce size     from 513 to 512 bits, exposing a potential timing side-channel. (CVE-2024-28834)

  - A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a     specially crafted .pem bundle using the certtool --verify-chain command. (CVE-2024-28835)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-f69ecb0511 advisory.

  - A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits     deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such     as when using the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag, it can result in a noticeable step in nonce size     from 513 to 512 bits, exposing a potential timing side-channel. (CVE-2024-28834)

  - A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a     specially crafted .pem bundle using the certtool --verify-chain command. (CVE-2024-28835)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-591 advisory.

  - A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits     deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such     as when using the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag, it can result in a noticeable step in nonce size     from 513 to 512 bits, exposing a potential timing side-channel. (CVE-2024-28834)

  - A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a     specially crafted .pem bundle using the certtool --verify-chain command. (CVE-2024-28835)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:2044 advisory.

  - gnutls: vulnerable to Minerva side-channel information leak (CVE-2024-28834)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1997 advisory.

  - gnutls: vulnerable to Minerva side-channel information leak (CVE-2024-28834)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12336 advisory.

  - A vulnerability was found in GnuTLS. The response times to malformed ciphertexts in RSA-PSK     ClientKeyExchange differ from the response times of ciphertexts with correct PKCS#1 v1.5 padding. This     issue may allow a remote attacker to perform a timing side-channel attack in the RSA-PSK key exchange,     potentially leading to the leakage of sensitive data. CVE-2024-0553 is designated as an incomplete     resolution for CVE-2023-5981. (CVE-2024-0553)

  - A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a     specially crafted .pem bundle using the certtool --verify-chain command. (CVE-2024-28835)

  - A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with     distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure.
    This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack.
    (CVE-2024-0567)

  - A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits     deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such     as when using the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag, it can result in a noticeable step in nonce size     from 513 to 512 bits, exposing a potential timing side-channel. (CVE-2024-28834)

  - A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange     differ from response times of ciphertexts with correct PKCS#1 v1.5 padding. (CVE-2023-5981)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-1879 advisory.

  - A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a     specially crafted .pem bundle using the certtool --verify-chain command. (CVE-2024-28835)

  - A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits     deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such     as when using the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag, it can result in a noticeable step in nonce size     from 513 to 512 bits, exposing a potential timing side-channel. (CVE-2024-28834)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:1879 advisory.

  - A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits     deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such     as when using the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag, it can result in a noticeable step in nonce size     from 513 to 512 bits, exposing a potential timing side-channel. (CVE-2024-28834)

  - A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a     specially crafted .pem bundle using the certtool --verify-chain command. (CVE-2024-28835)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1879 advisory.

  - gnutls: vulnerable to Minerva side-channel information leak (CVE-2024-28834)

  - gnutls: potential crash during chain building/verification (CVE-2024-28835)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6733-1 advisory.

  - A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits     deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such     as when using the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag, it can result in a noticeable step in nonce size     from 513 to 512 bits, exposing a potential timing side-channel. (CVE-2024-28834)

  - A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a     specially crafted .pem bundle using the certtool --verify-chain command. (CVE-2024-28835)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-1784 advisory.

  - A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits     deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such     as when using the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag, it can result in a noticeable step in nonce size     from 513 to 512 bits, exposing a potential timing side-channel. (CVE-2024-28834)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1271-1 advisory.

  - A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits     deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such     as when using the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag, it can result in a noticeable step in nonce size     from 513 to 512 bits, exposing a potential timing side-channel. (CVE-2024-28834)

  - A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a     specially crafted .pem bundle using the certtool --verify-chain command. (CVE-2024-28835)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:1784 advisory.

  - A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits     deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such     as when using the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag, it can result in a noticeable step in nonce size     from 513 to 512 bits, exposing a potential timing side-channel. (CVE-2024-28834)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1784 advisory.

  - gnutls: vulnerable to Minerva side-channel information leak (CVE-2024-28834)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-af55471f75 advisory.

  - A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits     deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such     as when using the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag, it can result in a noticeable step in nonce size     from 513 to 512 bits, exposing a potential timing side-channel. (CVE-2024-28834)

  - A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a     specially crafted .pem bundle using the certtool --verify-chain command. (CVE-2024-28835)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-0459dcd356 advisory.

  - A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits     deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such     as when using the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag, it can result in a noticeable step in nonce size     from 513 to 512 bits, exposing a potential timing side-channel. (CVE-2024-28834)

  - A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a     specially crafted .pem bundle using the certtool --verify-chain command. (CVE-2024-28835)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of gnutls installed on the remote host is prior to 3.8.4. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2024-079-01 advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
197200	RHEL 9 : gnutls (RHSA-2024:2889)	Nessus	Red Hat Local Security Checks	medium
196952	Rocky Linux 9 : gnutls (RLSA-2024:2570)	Nessus	Rocky Linux Local Security Checks	medium
196534	RHEL 7 : gnutls (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
196513	RHEL 6 : gnutls (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
195197	Oracle Linux 9 : gnutls (ELSA-2024-12364)	Nessus	Oracle Linux Local Security Checks	medium
195141	Oracle Linux 9 : gnutls (ELSA-2024-2570)	Nessus	Oracle Linux Local Security Checks	medium
195003	Rocky Linux 8 : gnutls (RLSA-2024:1784)	Nessus	Rocky Linux Local Security Checks	medium
194840	RHEL 9 : gnutls (RHSA-2024:2570)	Nessus	Red Hat Local Security Checks	medium
194726	Ubuntu 24.04 LTS. : GnuTLS vulnerabilities (USN-6733-2)	Nessus	Ubuntu Local Security Checks	medium
194572	Fedora 40 : gnutls (2024-f69ecb0511)	Nessus	Fedora Local Security Checks	medium
194492	Amazon Linux 2023 : gnutls, gnutls-c++, gnutls-dane (ALAS2023-2024-591)	Nessus	Amazon Linux Local Security Checks	medium
193870	RHEL 8 : gnutls (RHSA-2024:2044)	Nessus	Red Hat Local Security Checks	medium
193785	RHEL 8 : gnutls (RHSA-2024:1997)	Nessus	Red Hat Local Security Checks	medium
193736	Oracle Linux 9 : gnutls (ELSA-2024-12336)	Nessus	Oracle Linux Local Security Checks	high
193532	Oracle Linux 9 : gnutls (ELSA-2024-1879)	Nessus	Oracle Linux Local Security Checks	medium
193501	AlmaLinux 9 : gnutls (ALSA-2024:1879)	Nessus	Alma Linux Local Security Checks	medium
193472	RHEL 9 : gnutls (RHSA-2024:1879)	Nessus	Red Hat Local Security Checks	medium
193341	Ubuntu 20.04 LTS / 22.04 LTS / 23.10 : GnuTLS vulnerabilities (USN-6733-1)	Nessus	Ubuntu Local Security Checks	medium
193323	Oracle Linux 8 : gnutls (ELSA-2024-1784)	Nessus	Oracle Linux Local Security Checks	medium
193307	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : gnutls (SUSE-SU-2024:1271-1)	Nessus	SuSE Local Security Checks	medium
193279	AlmaLinux 8 : gnutls (ALSA-2024:1784)	Nessus	Alma Linux Local Security Checks	medium
193228	RHEL 8 : gnutls (RHSA-2024:1784)	Nessus	Red Hat Local Security Checks	medium
192727	Fedora 38 : gnutls (2024-af55471f75)	Nessus	Fedora Local Security Checks	medium
192513	Fedora 39 : gnutls (2024-0459dcd356)	Nessus	Fedora Local Security Checks	medium
192268	Slackware Linux 15.0 / current gnutls Multiple Vulnerabilities (SSA:2024-079-01)	Nessus	Slackware Local Security Checks	medium

Detections

Analytics

CVE-2024-28834

medium

Tenable Plugins

medium

medium

high

high

medium

medium

medium

medium

medium

medium

medium

medium

medium

high

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium