This update for gnutls fixes the following issues :

Security issue fixed :

CVE-2018-16868: Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification (bsc#1118087).

Non-security issue fixed: Explicitly require libnettle 3.4.1 to prevent missing symbol errors (bsc#1134856).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Added explicit Requires for nettle >= 3.4.1

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for gnutls fixes to version 3.6.7 the following issues :

Security issued fixed :

  - CVE-2019-3836: Fixed an invalid pointer access via     malformed TLS1.3 async messages (bsc#1130682).

  - CVE-2019-3829: Fixed a double free vulnerability in the     certificate verification API (bsc#1130681).

  - CVE-2018-16868: Fixed Bleichenbacher-like side channel     leakage in PKCS#1 v1.5 verification and padding oracle     verification (bsc#1118087)

Non-security issue fixed :

  - Update gnutls to support TLS 1.3 (fate#327114) 

This update was imported from the SUSE:SLE-15:Update update project.

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - gnutls: Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification and padding oracle     verification (CVE-2018-16868)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

This update for gnutls fixes the following issues :

Security issue fixed :

  - CVE-2018-16868: Fixed Bleichenbacher-like side channel     leakage in PKCS#1 v1.5 verification (bsc#1118087).

Non-security issue fixed :

  - Explicitly require libnettle 3.4.1 to prevent missing     symbol errors (bsc#1134856).

This update was imported from the SUSE:SLE-15:Update update project.

- Update to upstream 3.6.5 release

  - Security fix for CVE-2018-16868

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - gnutls: Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification and padding oracle     verification (CVE-2018-16868)

  - gnutls: incomplete fix for CVE-2023-5981 (CVE-2024-0553)

  - GnuTLS before 2017-02-20 has an out-of-bounds write caused by an integer overflow and heap-based buffer     overflow related to the cdk_pkt_read function in opencdk/read-packet.c. This issue (which is a subset of     the vendor's GNUTLS-SA-2017-3 report) is fixed in 3.5.10. (CVE-2017-7869)

  - A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call     memcpy, providing zero-length input may cause undefined behavior. This flaw leads to a denial of service     after authentication in rare circumstances. (CVE-2021-4209)

  - A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during     verification of pkcs7 signatures in gnutls_pkcs7_verify function. (CVE-2022-2509)

  - A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. This     side-channel can be sufficient to recover the key encrypted in the RSA ciphertext across a network in a     Bleichenbacher style attack. To achieve a successful decryption the attacker would need to send a large     amount of specially crafted messages to the vulnerable server. By recovering the secret from the     ClientKeyExchange message, the attacker would be able to decrypt the application data exchanged over that     connection. (CVE-2023-0361)

  - A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange     differ from response times of ciphertexts with correct PKCS#1 v1.5 padding. (CVE-2023-5981)

  - A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with     distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure.
    This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack.
    (CVE-2024-0567)

  - A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits     deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such     as when using the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag, it can result in a noticeable step in nonce size     from 513 to 512 bits, exposing a potential timing side-channel. (CVE-2024-28834)

  - A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a     specially crafted .pem bundle using the certtool --verify-chain command. (CVE-2024-28835)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - gnutls: HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of wrong constant (CVE-2018-10845)

  - gnutls: incomplete fix for CVE-2023-5981 (CVE-2024-0553)

  - GnuTLS before 2017-02-20 has an out-of-bounds write caused by an integer overflow and heap-based buffer     overflow related to the cdk_pkt_read function in opencdk/read-packet.c. This issue (which is a subset of     the vendor's GNUTLS-SA-2017-3 report) is fixed in 3.5.10. (CVE-2017-7869)

  - It was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky thirteen style     attack. Remote attackers could use this flaw to conduct distinguishing attacks and plaintext-recovery     attacks via statistical analysis of timing data using crafted packets. (CVE-2018-10844)

  - A cache-based side channel in GnuTLS implementation that leads to plain text recovery in cross-VM attack     setting was found. An attacker could use a combination of Just in Time Prime+probe attack in combination     with Lucky-13 attack to recover plain text using crafted packets. (CVE-2018-10846)

  - A Bleichenbacher type side-channel based padding oracle attack was found in the way gnutls handles     verification of RSA decrypted PKCS#1 v1.5 data. An attacker who is able to run process on the same     physical core as the victim process, could use this to extract plaintext or in some cases downgrade any     TLS connections to a vulnerable server. (CVE-2018-16868)

  - A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call     memcpy, providing zero-length input may cause undefined behavior. This flaw leads to a denial of service     after authentication in rare circumstances. (CVE-2021-4209)

  - A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. This     side-channel can be sufficient to recover the key encrypted in the RSA ciphertext across a network in a     Bleichenbacher style attack. To achieve a successful decryption the attacker would need to send a large     amount of specially crafted messages to the vulnerable server. By recovering the secret from the     ClientKeyExchange message, the attacker would be able to decrypt the application data exchanged over that     connection. (CVE-2023-0361)

  - A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange     differ from response times of ciphertexts with correct PKCS#1 v1.5 padding. (CVE-2023-5981)

  - A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with     distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure.
    This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack.
    (CVE-2024-0567)

  - A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits     deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such     as when using the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag, it can result in a noticeable step in nonce size     from 513 to 512 bits, exposing a potential timing side-channel. (CVE-2024-28834)

  - A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a     specially crafted .pem bundle using the certtool --verify-chain command. (CVE-2024-28835)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - gnutls: Heap read overflow in read-packet.c (CVE-2017-5337)

  - The stream reading functions in lib/opencdk/read-packet.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8     allow remote attackers to cause a denial of service (out-of-memory error and crash) via a crafted OpenPGP     certificate. (CVE-2017-5335)

  - Stack-based buffer overflow in the cdk_pk_get_keyid function in lib/opencdk/pubkey.c in GnuTLS before     3.3.26 and 3.5.x before 3.5.8 allows remote attackers to have unspecified impact via a crafted OpenPGP     certificate. (CVE-2017-5336)

  - GnuTLS before 2017-02-20 has an out-of-bounds write caused by an integer overflow and heap-based buffer     overflow related to the cdk_pkt_read function in opencdk/read-packet.c. This issue (which is a subset of     the vendor's GNUTLS-SA-2017-3 report) is fixed in 3.5.10. (CVE-2017-7869)

  - It was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky thirteen style     attack. Remote attackers could use this flaw to conduct distinguishing attacks and plaintext-recovery     attacks via statistical analysis of timing data using crafted packets. (CVE-2018-10844)

  - It was found that the GnuTLS implementation of HMAC-SHA-384 was vulnerable to a Lucky thirteen style     attack. Remote attackers could use this flaw to conduct distinguishing attacks and plain text recovery     attacks via statistical analysis of timing data using crafted packets. (CVE-2018-10845)

  - A cache-based side channel in GnuTLS implementation that leads to plain text recovery in cross-VM attack     setting was found. An attacker could use a combination of Just in Time Prime+probe attack in combination     with Lucky-13 attack to recover plain text using crafted packets. (CVE-2018-10846)

  - A Bleichenbacher type side-channel based padding oracle attack was found in the way gnutls handles     verification of RSA decrypted PKCS#1 v1.5 data. An attacker who is able to run process on the same     physical core as the victim process, could use this to extract plaintext or in some cases downgrade any     TLS connections to a vulnerable server. (CVE-2018-16868)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

Security fix for CVE-2018-16868

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

New gnutls packages are available for Slackware 14.2 and -current to fix security issues.

This update for gnutls fixes to version 3.6.7 the following issues :

Security issued fixed :

CVE-2019-3836: Fixed an invalid pointer access via malformed TLS1.3 async messages (bsc#1130682).

CVE-2019-3829: Fixed a double free vulnerability in the certificate verification API (bsc#1130681).

CVE-2018-16868: Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification and padding oracle verification (bsc#1118087)

Non-security issue fixed: Update gnutls to support TLS 1.3 (fate#327114)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Published	Updated	Severity
126442	SUSE SLED15 / SLES15 Security Update : gnutls (SUSE-SU-2019:1351-2)	Nessus	SuSE Local Security Checks	7/2/2019	5/13/2024	medium
121169	Fedora 28 : gnutls (2019-1a0d4443f8)	Nessus	Fedora Local Security Checks	1/15/2019	2/24/2020	medium
124714	openSUSE Security Update : gnutls (openSUSE-2019-1353)	Nessus	SuSE Local Security Checks	5/9/2019	1/19/2021	medium
196600	RHEL 8 : gnutls (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	5/11/2024	5/11/2024	medium
125619	openSUSE Security Update : gnutls (openSUSE-2019-1477)	Nessus	SuSE Local Security Checks	5/31/2019	5/17/2024	medium
120549	Fedora 29 : gnutls (2018-79f7540a1e)	Nessus	Fedora Local Security Checks	1/3/2019	1/6/2021	medium
196534	RHEL 7 : gnutls (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	5/11/2024	5/11/2024	high
196513	RHEL 6 : gnutls (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	5/11/2024	5/11/2024	high
196551	RHEL 5 : gnutls (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	5/11/2024	5/11/2024	critical
125465	SUSE SLED15 / SLES15 Security Update : gnutls (SUSE-SU-2019:1351-1)	Nessus	SuSE Local Security Checks	5/28/2019	1/13/2021	medium
121076	Fedora 28 : gnutls (2019-24dc022a51)	Nessus	Fedora Local Security Checks	1/11/2019	2/26/2020	medium
121141	Fedora 29 : gnutls (2019-99eefddc65)	Nessus	Fedora Local Security Checks	1/14/2019	2/24/2020	medium
119447	Slackware 14.2 / current : gnutls (SSA:2018-339-01)	Nessus	Slackware Local Security Checks	12/6/2018	6/9/2020	medium
124454	SUSE SLED15 / SLES15 Security Update : gnutls (SUSE-SU-2019:1121-1)	Nessus	SuSE Local Security Checks	5/1/2019	1/13/2021	medium

Detections

Analytics

Plugins Search

medium

medium

medium

medium

medium

medium

high

high

critical

medium

medium

medium

medium

medium