Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2018-2798

Низкий

ALT-PU-2018-2798: package gnutls30 update to version 3.6.5-alt1

Источник
errata.altlinux.org
Дата публикации
06.12.2018
Дата обновления
06.12.2018
Устраненные уязвимости
2

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades gnutls30 to version 3.6.5-alt1.

Устраненные уязвимости2

Связанные уязвимости

CVSS3: 5.6
ubuntu
почти 8 лет назад

A Bleichenbacher type side-channel based padding oracle attack was found in the way gnutls handles verification of RSA decrypted PKCS#1 v1.5 data. An attacker who is able to run process on the same physical core as the victim process, could use this to extract plaintext or in some cases downgrade any TLS connections to a vulnerable server.

CVSS3: 4.7
redhat
почти 8 лет назад

A Bleichenbacher type side-channel based padding oracle attack was found in the way gnutls handles verification of RSA decrypted PKCS#1 v1.5 data. An attacker who is able to run process on the same physical core as the victim process, could use this to extract plaintext or in some cases downgrade any TLS connections to a vulnerable server.

CVSS3: 5.6
nvd
почти 8 лет назад

A Bleichenbacher type side-channel based padding oracle attack was found in the way gnutls handles verification of RSA decrypted PKCS#1 v1.5 data. An attacker who is able to run process on the same physical core as the victim process, could use this to extract plaintext or in some cases downgrade any TLS connections to a vulnerable server.

CVSS3: 5.6
debian
почти 8 лет назад

A Bleichenbacher type side-channel based padding oracle attack was fou ...

suse-cvrf
больше 7 лет назад

Security update for gnutls