Summary
Hubert Kario discovered that GnuTLS had a timing side-channel when handling
certain RSA messages. A remote attacker could possibly use this issue to
recover sensitive information.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | gnutls28 | 3.6.13-2ubuntu1.8 |
| Ubuntu · 22.04 LTS 22.04:LTS | gnutls28 | 3.7.3-4ubuntu1.2 |
Vulnerabilities 1
-
High 7.4
A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. This side-channel can…
References
-
report
https://ubuntu.com/security/CVE-2023-0361