Summary
It was discovered that GnuTLS incorrectly handled session ticket encryption
keys. A remote attacker could possibly use this issue to bypass
authentication or recover sensitive information.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | gnutls28 | 3.6.13-2ubuntu1.1 |
Vulnerabilities 1
-
Unscored —
GnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of confidentiality in TL…
References
-
report
https://ubuntu.com/security/CVE-2020-13777