A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. This side-channel can be sufficient to recover the key encrypted in the RSA ciphertext across a network in a Bleichenbacher style attack. To achieve a successful decryption the attacker would need to send a large amount of specially crafted messages to the vulnerable server. By recovering the secret from the ClientKeyExchange message, the attacker would be able to decrypt the application data exchanged over that connection.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
| Attack Vector | NETWORK |
|---|---|
| Attack Complexity | HIGH |
| Privileges Required | NONE |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | HIGH |
| Integrity Impact | HIGH |
| Availability Impact | NONE |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
CWE-203
|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | Secondary |
en
CWE-203
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| gnu | gnutls | 3.6.8-11.el8_2 | <built-in method update of dict object at 0x7fd369e83980> | Application |
| redhat | enterprise_linux | 8.0 | <built-in method update of dict object at 0x7fd384a659c0> | Operating System |
| redhat | enterprise_linux | 9.0 | <built-in method update of dict object at 0x7fd2a2df9b40> | Operating System |
| debian | debian_linux | 10.0 | <built-in method update of dict object at 0x7fd36b3c3f80> | Operating System |
| fedoraproject | fedora | 36 | <built-in method update of dict object at 0x7fd369e81580> | Operating System |
| fedoraproject | fedora | 37 | <built-in method update of dict object at 0x7fd369e82bc0> | Operating System |
| fedoraproject | fedora | 38 | <built-in method update of dict object at 0x7fd36b3c3e00> | Operating System |
| netapp | active_iq_unified_manager | - | <built-in method update of dict object at 0x7fd3844a1f40> | Application |
| netapp | converged_systems_advisor_agent | - | <built-in method update of dict object at 0x7fd3844a0340> | Application |
| netapp | ontap_select_deploy_administration_utility | - | <built-in method update of dict object at 0x7fd369e83f00> | Application |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:gnu:gnutls:3.6.8-11.el8_2:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:* |
| Yes | cpe:2.3:a:netapp:converged_systems_advisor_agent:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:* |