Количество 11
Количество 11
BDU:2020-02038
Уязвимость функции send_client_hello (handshake.c) криптографической библиотеки GnuTLS, связанная с недостатками используемых криптографических алгоритмов, позволяющая нарушителю получить несанкционированный доступ к конфиденциальным данным или оказать воздействие на целостность данных
CVE-2020-11501
GnuTLS 3.6.x before 3.6.13 uses incorrect cryptography for DTLS. The earliest affected version is 3.6.3 (2018-07-16) because of an error in a 2017-10-06 commit. The DTLS client always uses 32 '\0' bytes instead of a random value, and thus contributes no randomness to a DTLS negotiation. This breaks the security guarantees of the DTLS protocol.
CVE-2020-11501
GnuTLS 3.6.x before 3.6.13 uses incorrect cryptography for DTLS. The earliest affected version is 3.6.3 (2018-07-16) because of an error in a 2017-10-06 commit. The DTLS client always uses 32 '\0' bytes instead of a random value, and thus contributes no randomness to a DTLS negotiation. This breaks the security guarantees of the DTLS protocol.
CVE-2020-11501
GnuTLS 3.6.x before 3.6.13 uses incorrect cryptography for DTLS. The earliest affected version is 3.6.3 (2018-07-16) because of an error in a 2017-10-06 commit. The DTLS client always uses 32 '\0' bytes instead of a random value, and thus contributes no randomness to a DTLS negotiation. This breaks the security guarantees of the DTLS protocol.
CVE-2020-11501
CVE-2020-11501
GnuTLS 3.6.x before 3.6.13 uses incorrect cryptography for DTLS. The e ...
openSUSE-SU-2020:0501-1
Security update for gmp, gnutls, libnettle
SUSE-SU-2020:0948-2
Security update for gmp, gnutls, libnettle
SUSE-SU-2020:0948-1
Security update for gmp, gnutls, libnettle
GHSA-j883-wjrw-g444
GnuTLS 3.6.x before 3.6.13 uses incorrect cryptography for DTLS. The earliest affected version is 3.6.3 (2018-07-16) because of an error in a 2017-10-06 commit. The DTLS client always uses 32 '\0' bytes instead of a random value, and thus contributes no randomness to a DTLS negotiation. This breaks the security guarantees of the DTLS protocol.
ELSA-2020-1998
ELSA-2020-1998: gnutls security update (MODERATE)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2020-02038 Уязвимость функции send_client_hello (handshake.c) криптографической библиотеки GnuTLS, связанная с недостатками используемых криптографических алгоритмов, позволяющая нарушителю получить несанкционированный доступ к конфиденциальным данным или оказать воздействие на целостность данных | CVSS3: 9.1 | 3% Низкий | больше 6 лет назад |
 | CVE-2020-11501 GnuTLS 3.6.x before 3.6.13 uses incorrect cryptography for DTLS. The earliest affected version is 3.6.3 (2018-07-16) because of an error in a 2017-10-06 commit. The DTLS client always uses 32 '\0' bytes instead of a random value, and thus contributes no randomness to a DTLS negotiation. This breaks the security guarantees of the DTLS protocol. | CVSS3: 7.4 | 3% Низкий | больше 6 лет назад |
 | CVE-2020-11501 GnuTLS 3.6.x before 3.6.13 uses incorrect cryptography for DTLS. The earliest affected version is 3.6.3 (2018-07-16) because of an error in a 2017-10-06 commit. The DTLS client always uses 32 '\0' bytes instead of a random value, and thus contributes no randomness to a DTLS negotiation. This breaks the security guarantees of the DTLS protocol. | CVSS3: 7.4 | 3% Низкий | больше 6 лет назад |
 | CVE-2020-11501 GnuTLS 3.6.x before 3.6.13 uses incorrect cryptography for DTLS. The earliest affected version is 3.6.3 (2018-07-16) because of an error in a 2017-10-06 commit. The DTLS client always uses 32 '\0' bytes instead of a random value, and thus contributes no randomness to a DTLS negotiation. This breaks the security guarantees of the DTLS protocol. | CVSS3: 7.4 | 3% Низкий | больше 6 лет назад |
 | CVSS3: 7.4 | 3% Низкий | почти 6 лет назад | |
| CVE-2020-11501 GnuTLS 3.6.x before 3.6.13 uses incorrect cryptography for DTLS. The e ... | CVSS3: 7.4 | 3% Низкий | больше 6 лет назад |
 | openSUSE-SU-2020:0501-1 Security update for gmp, gnutls, libnettle | 3% Низкий | больше 6 лет назад | |
| SUSE-SU-2020:0948-2 Security update for gmp, gnutls, libnettle | 3% Низкий | около 4 лет назад | |
| SUSE-SU-2020:0948-1 Security update for gmp, gnutls, libnettle | 3% Низкий | больше 6 лет назад | |
| GHSA-j883-wjrw-g444 GnuTLS 3.6.x before 3.6.13 uses incorrect cryptography for DTLS. The earliest affected version is 3.6.3 (2018-07-16) because of an error in a 2017-10-06 commit. The DTLS client always uses 32 '\0' bytes instead of a random value, and thus contributes no randomness to a DTLS negotiation. This breaks the security guarantees of the DTLS protocol. | 3% Низкий | около 4 лет назад | |
| ELSA-2020-1998 ELSA-2020-1998: gnutls security update (MODERATE) | 3% Низкий | около 6 лет назад |
Уязвимостей на страницу