Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2012-0390HistoryJan 06, 2012 - 1:55 a.m.
CVE-2012-0390
2012-01-0601:55:01
Debian Security Bug Tracker
security-tracker.debian.org
19
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.005 Low
EPSS
Percentile
76.2%
The DTLS implementation in GnuTLS 3.0.10 and earlier executes certain error-handling code only if there is a specific relationship between a padding length and the ciphertext size, which makes it easier for remote attackers to recover partial plaintext via a timing side-channel attack, a related issue to CVE-2011-4108.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | gnutls28 | < 3.0.11-1 | gnutls28_3.0.11-1_all.deb |
| Debian | 11 | all | gnutls28 | < 3.0.11-1 | gnutls28_3.0.11-1_all.deb |
| Debian | 999 | all | gnutls28 | < 3.0.11-1 | gnutls28_3.0.11-1_all.deb |
| Debian | 13 | all | gnutls28 | < 3.0.11-1 | gnutls28_3.0.11-1_all.deb |
Related
cvelist
cvelist
prion
prion
Sql injection
2012-01-06 01:55:00
Design/Logic Flaw
2012-01-06 01:55:00
Design/Logic Flaw
2012-01-19 19:55:00
cve
cve
ubuntucve
ubuntucve
nvd
nvd
nessus
nessus
openSUSE Security Update : gnutls (openSUSE-SU-2012:0344-1)
2014-06-13 00:00:00
openSUSE Security Update : gnutls (openSUSE-2012-121)
2014-06-13 00:00:00
F5 Networks BIG-IP : OpenSSL vulnerability (SOL15388)
2014-10-10 00:00:00
f5
f5
SOL15388 - OpenSSL vulnerability CVE-2011-4108
2014-07-17 00:00:00
K15388 : OpenSSL vulnerability CVE-2011-4108
2014-08-11 00:00:00
K15417 : OpenSSL vulnerability CVE-2012-0050
2014-08-14 00:00:00
debiancve
debiancve
CVE-2011-4108
2012-01-06 01:55:00
CVE-2012-0050
2012-01-19 19:55:01
veracode
veracode
Information Disclosure
2020-04-10 01:09:44
openssl
openssl
Vulnerability in OpenSSL CVE-2011-4108
2012-01-04 00:00:00
Vulnerability in OpenSSL CVE-2012-0050
2012-01-04 00:00:00
paloalto
paloalto
OpenSSL Plain Text Recovery Attack Vulnerability
2012-04-27 23:30:00
openvas
openvas
FreeBSD Ports: openssl
2012-02-12 00:00:00
FreeBSD Ports: openssl
2012-02-12 00:00:00
Fedora Update for openssl FEDORA-2012-0708
2012-04-02 00:00:00
freebsd
freebsd
OpenSSL -- DTLS Denial of Service
2012-01-18 00:00:00
OpenSSL -- multiple vulnerabilities
2012-01-04 00:00:00
fedora
fedora
[SECURITY] Fedora 16 Update: openssl-1.0.0g-1.fc16
2012-01-22 05:27:15
[SECURITY] Fedora 15 Update: openssl-1.0.0g-1.fc15
2012-01-24 07:55:34
[SECURITY] Fedora 16 Update: openssl-1.0.0f-1.fc16
2012-01-11 06:13:34
suse
suse
Security update for gnutls (critical)
2014-03-04 01:04:52
Security update for OpenSSL (important)
2012-01-16 17:08:28
openssl: fixing various security issues (important)
2012-01-16 17:08:14
redhat
redhat
(RHSA-2012:0060) Moderate: openssl security update
2012-01-24 00:00:00
(RHSA-2012:0059) Moderate: openssl security update
2012-01-24 00:00:00
(RHSA-2012:1306) Important: openssl security update
2012-09-24 15:52:11
centos
centos
openssl security update
2012-01-30 20:25:59
openssl security update
2012-01-24 21:54:22
amazon
amazon
Medium: openssl
2012-02-02 14:24:00
oraclelinux
oraclelinux
openssl security update
2012-01-24 00:00:00
openssl security update
2012-01-24 00:00:00
openssl-fips security update
2015-04-02 00:00:00
debian
debian
[SECURITY] [DSA 2390-1] openssl security update
2012-01-15 20:23:09
aix
aix
Multiple OpenSSL vulnerabilities
2012-03-21 13:02:49
osv
osv
openssl - several
2012-01-15 00:00:00
gentoo
gentoo
OpenSSL: Multiple vulnerabilities
2012-03-06 00:00:00
securityvulns
securityvulns
OpenSSL library multiple security vulnerabilities
2012-01-20 00:00:00
HP Onboard Administrator multiple security vulnerabilities
2012-06-17 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1939
2021-07-02 17:38:47
cert
cert
ubuntu
ubuntu
OpenSSL vulnerabilities
2012-02-09 00:00:00
ibm
ibm
vmware
vmware
VMware vSphere and vCOps updates to third party libraries
2012-08-30 00:00:00
VMware vSphere and vCOps updates to third party libraries
2012-08-30 00:00:00
lenovo
lenovo
Intel® PROSet/Wireless WiFi Software Vulnerabilities - US
2018-11-13 17:10:51
Intel® PROSet/Wireless WiFi Software Vulnerabilities - Lenovo Support US
2018-11-13 17:10:51
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.005 Low
EPSS
Percentile
76.2%
Related for DEBIANCVE:CVE-2012-0390