Lucene search
GoogleOSV:ALSA-2023:1569HistoryApr 04, 2023 - 12:00 a.m.
Moderate: gnutls security and bug fix update
2023-04-0400:00:00
Google
osv.dev
8
gnutls
security
bug fix
tls
ssl
dtls
cryptographic algorithms
cve-2023-0361
side-channel
rsa
key exchange
cvss score
references
bug
bz#2131152
library
protocols
CVSS3
7.4
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
AI Score
7.7
Confidence
High
EPSS
0.002
Percentile
57.1%
The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.
Security Fix(es):
- gnutls: timing side-channel in the TLS RSA key exchange code (CVE-2023-0361)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
- trap invalid opcode ip:7feef81809fe sp:7fee997419c0 error:0 in libgnutls.so.30.28.2[7feef8040000+1dd000] (BZ#2131152)
Related
nessus
nessus
EulerOS Virtualization 2.9.1 : gnutls (EulerOS-SA-2023-1997)
2023-06-02 00:00:00
Debian DSA-5349-1 : gnutls28 - security update
2023-02-15 00:00:00
Debian DLA-3321-1 : gnutls28 - LTS security update
2023-02-18 00:00:00
cbl_mariner
cbl_mariner
CVE-2023-0361 affecting package gnutls 3.6.14-8
2023-03-16 03:39:40
CVE-2023-0361 affecting package gnutls for versions less than 3.7.7-2
2023-03-24 23:56:03
openvas
openvas
Fedora: Security Advisory for guile-gnutls (FEDORA-2023-1c4a6a47ae)
2023-03-02 00:00:00
Huawei EulerOS: Security Advisory for gnutls (EulerOS-SA-2023-1953)
2023-05-18 00:00:00
Huawei EulerOS: Security Advisory for gnutls (EulerOS-SA-2023-2070)
2023-06-07 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: guile-gnutls-3.7.11-1.fc37
2023-03-01 02:02:40
[SECURITY] Fedora 36 Update: gnutls-3.8.0-2.fc36
2023-03-18 05:03:17
[SECURITY] Fedora 37 Update: gnutls-3.8.0-1.fc37
2023-03-01 02:02:38
altlinux
altlinux
Security fix for the ALT Linux 10 package gnutls30 version 3.6.16-alt3
2023-02-22 00:00:00
Security fix for the ALT Linux 9 package gnutls30 version 3.6.16-alt3
2023-03-01 00:00:00
rocky
rocky
gnutls security and bug fix update
2023-04-06 15:52:32
gnutls security and bug fix update
2023-03-08 16:38:32
redhat
redhat
(RHSA-2023:1200) Moderate: gnutls security and bug fix update
2023-03-14 13:18:57
(RHSA-2023:3361) Moderate: gnutls security update
2023-05-31 08:21:22
(RHSA-2023:1569) Moderate: gnutls security and bug fix update
2023-04-04 08:51:02
oraclelinux
oraclelinux
gnutls security and bug fix update
2023-04-04 00:00:00
gnutls security and bug fix update
2023-03-08 00:00:00
slackware
slackware
[slackware-security] gnutls
2023-02-10 20:14:21
almalinux
almalinux
Moderate: gnutls security and bug fix update
2023-03-07 00:00:00
Moderate: gnutls security and bug fix update
2023-04-04 00:00:00
osv
osv
Moderate: gnutls security and bug fix update
2023-03-07 00:00:00
Moderate: gnutls security and bug fix update
2023-04-06 15:52:32
Moderate: gnutls security and bug fix update
2023-03-08 16:38:32
cvelist
cvelist
CVE-2023-0361
2023-02-15 00:00:00
redhatcve
redhatcve
CVE-2023-0361
2023-02-15 06:59:49
veracode
veracode
Man-in-the-Middle (MitM)
2023-02-12 19:18:36
mageia
mageia
Updated gnutls packages fix security vulnerability
2023-02-27 23:27:16
ubuntu
ubuntu
GnuTLS vulnerability
2023-02-28 00:00:00
prion
prion
Code injection
2023-02-15 18:15:00
debian
debian
[SECURITY] [DLA 3321-1] gnutls28 security update
2023-02-18 16:19:13
[SECURITY] [DSA 5349-1] gnutls28 security update
2023-02-14 18:54:44
nvd
nvd
CVE-2023-0361
2023-02-15 18:15:11
cve
cve
CVE-2023-0361
2023-02-15 18:15:11
cloudfoundry
cloudfoundry
USN-5901-1: GnuTLS vulnerability | Cloud Foundry
2023-03-23 00:00:00
ibm
ibm
freebsd
freebsd
GnuTLS -- timing sidechannel in RSA decryption
2023-02-10 00:00:00
MySQL -- Multiple vulnerabilities
2023-07-18 00:00:00
redos
redos
ROS-20240404-08
2024-04-04 00:00:00
debiancve
debiancve
CVE-2023-0361
2023-02-15 18:15:11
alpinelinux
alpinelinux
CVE-2023-0361
2023-02-15 18:15:11
photon
photon
Important Photon OS Security Update - PHSA-2023-4.0-0337
2023-02-21 00:00:00
Important Photon OS Security Update - PHSA-2023-3.0-0538
2023-02-26 00:00:00
ubuntucve
ubuntucve
CVE-2023-0361
2023-02-15 00:00:00
ics
ics
Siemens SCALANCE XCM-/XRM-300
2024-02-15 12:00:00
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00
Oracle Critical Patch Update Advisory - April 2023
2023-04-18 00:00:00
CVSS3
7.4
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
AI Score
7.7
Confidence
High
EPSS
0.002
Percentile
57.1%
Related for OSV:ALSA-2023:1569