Summary
It was discovered that GnuTLS incorrectly validated the first byte of
padding in CBC modes. A remote attacker could possibly use this issue to
perform a padding oracle attack.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | gnutls26 | 2.12.23-12ubuntu2.3 |
References
-
report
https://launchpad.net/bugs/1510163