Lucene search
RedHatRHSA-2023:1569HistoryApr 04, 2023 - 8:51 a.m.
(RHSA-2023:1569) Moderate: gnutls security and bug fix update
2023-04-0408:51:02
access.redhat.com
91
gnutls
library
security
update
fix
ssl
tls
dtls
cve
side-channel
bug
CVSS3
7.4
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS
0.002
Percentile
57.1%
The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.
Security Fix(es):
- gnutls: timing side-channel in the TLS RSA key exchange code (CVE-2023-0361)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
- trap invalid opcode ip:7feef81809fe sp:7fee997419c0 error:0 in libgnutls.so.30.28.2[7feef8040000+1dd000] (BZ#2131152)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 8 | aarch64 | gnutls-devel | < 3.6.16-6.el8_7 | gnutls-devel-3.6.16-6.el8_7.aarch64.rpm |
| RedHat | 8 | i686 | gnutls-devel | < 3.6.16-6.el8_7 | gnutls-devel-3.6.16-6.el8_7.i686.rpm |
| RedHat | 8 | s390x | gnutls-c++ | < 3.6.16-6.el8_7 | gnutls-c++-3.6.16-6.el8_7.s390x.rpm |
| RedHat | 8 | s390x | gnutls-dane-debuginfo | < 3.6.16-6.el8_7 | gnutls-dane-debuginfo-3.6.16-6.el8_7.s390x.rpm |
| RedHat | 8 | x86_64 | gnutls-debuginfo | < 3.6.16-6.el8_7 | gnutls-debuginfo-3.6.16-6.el8_7.x86_64.rpm |
| RedHat | 8 | x86_64 | gnutls-dane-debuginfo | < 3.6.16-6.el8_7 | gnutls-dane-debuginfo-3.6.16-6.el8_7.x86_64.rpm |
| RedHat | 8 | aarch64 | gnutls-c++-debuginfo | < 3.6.16-6.el8_7 | gnutls-c++-debuginfo-3.6.16-6.el8_7.aarch64.rpm |
| RedHat | 8 | aarch64 | gnutls-debugsource | < 3.6.16-6.el8_7 | gnutls-debugsource-3.6.16-6.el8_7.aarch64.rpm |
| RedHat | 8 | ppc64le | gnutls-c++ | < 3.6.16-6.el8_7 | gnutls-c++-3.6.16-6.el8_7.ppc64le.rpm |
| RedHat | 8 | x86_64 | gnutls-c++-debuginfo | < 3.6.16-6.el8_7 | gnutls-c++-debuginfo-3.6.16-6.el8_7.x86_64.rpm |
Related
nessus
nessus
Debian DLA-3321-1 : gnutls28 - LTS security update
2023-02-18 00:00:00
SUSE SLES15 Security Update : gnutls (SUSE-SU-2023:0610-1)
2023-03-05 00:00:00
AlmaLinux 9 : gnutls (ALSA-2023:1141)
2023-03-13 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: guile-gnutls-3.7.11-1.fc37
2023-03-01 02:02:40
[SECURITY] Fedora 36 Update: gnutls-3.8.0-2.fc36
2023-03-18 05:03:17
[SECURITY] Fedora 37 Update: gnutls-3.8.0-1.fc37
2023-03-01 02:02:38
altlinux
altlinux
Security fix for the ALT Linux 10 package gnutls30 version 3.6.16-alt3
2023-02-22 00:00:00
Security fix for the ALT Linux 9 package gnutls30 version 3.6.16-alt3
2023-03-01 00:00:00
cbl_mariner
cbl_mariner
CVE-2023-0361 affecting package gnutls 3.6.14-8
2023-03-16 03:39:40
CVE-2023-0361 affecting package gnutls for versions less than 3.7.7-2
2023-03-24 23:56:03
openvas
openvas
Fedora: Security Advisory for guile-gnutls (FEDORA-2023-1c4a6a47ae)
2023-03-02 00:00:00
Huawei EulerOS: Security Advisory for gnutls (EulerOS-SA-2023-1953)
2023-05-18 00:00:00
Huawei EulerOS: Security Advisory for gnutls (EulerOS-SA-2023-2070)
2023-06-07 00:00:00
rocky
rocky
gnutls security and bug fix update
2023-04-06 15:52:32
gnutls security and bug fix update
2023-03-08 16:38:32
redhat
redhat
(RHSA-2023:1200) Moderate: gnutls security and bug fix update
2023-03-14 13:18:57
(RHSA-2023:3361) Moderate: gnutls security update
2023-05-31 08:21:22
(RHSA-2023:1141) Moderate: gnutls security and bug fix update
2023-03-07 13:28:29
oraclelinux
oraclelinux
gnutls security and bug fix update
2023-04-04 00:00:00
gnutls security and bug fix update
2023-03-08 00:00:00
slackware
slackware
[slackware-security] gnutls
2023-02-10 20:14:21
almalinux
almalinux
Moderate: gnutls security and bug fix update
2023-03-07 00:00:00
Moderate: gnutls security and bug fix update
2023-04-04 00:00:00
osv
osv
Moderate: gnutls security and bug fix update
2023-03-07 00:00:00
Moderate: gnutls security and bug fix update
2023-04-04 00:00:00
Moderate: gnutls security and bug fix update
2023-04-06 15:52:32
cvelist
cvelist
CVE-2023-0361
2023-02-15 00:00:00
redhatcve
redhatcve
CVE-2023-0361
2023-02-15 06:59:49
veracode
veracode
Man-in-the-Middle (MitM)
2023-02-12 19:18:36
mageia
mageia
Updated gnutls packages fix security vulnerability
2023-02-27 23:27:16
ubuntu
ubuntu
GnuTLS vulnerability
2023-02-28 00:00:00
prion
prion
Code injection
2023-02-15 18:15:00
debian
debian
[SECURITY] [DLA 3321-1] gnutls28 security update
2023-02-18 16:19:13
[SECURITY] [DSA 5349-1] gnutls28 security update
2023-02-14 18:54:44
nvd
nvd
CVE-2023-0361
2023-02-15 18:15:11
cve
cve
CVE-2023-0361
2023-02-15 18:15:11
freebsd
freebsd
GnuTLS -- timing sidechannel in RSA decryption
2023-02-10 00:00:00
MySQL -- Multiple vulnerabilities
2023-07-18 00:00:00
ibm
ibm
Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to GnuTLS information disclosure vulnerability( CVE-2023-0361)
2023-07-06 18:03:58
cloudfoundry
cloudfoundry
USN-5901-1: GnuTLS vulnerability | Cloud Foundry
2023-03-23 00:00:00
alpinelinux
alpinelinux
CVE-2023-0361
2023-02-15 18:15:11
redos
redos
ROS-20240404-08
2024-04-04 00:00:00
debiancve
debiancve
CVE-2023-0361
2023-02-15 18:15:11
photon
photon
Important Photon OS Security Update - PHSA-2023-4.0-0337
2023-02-21 00:00:00
Important Photon OS Security Update - PHSA-2023-3.0-0538
2023-02-26 00:00:00
ubuntucve
ubuntucve
CVE-2023-0361
2023-02-15 00:00:00
ics
ics
Siemens SCALANCE XCM-/XRM-300
2024-02-15 12:00:00
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00
Oracle Critical Patch Update Advisory - April 2023
2023-04-18 00:00:00
CVSS3
7.4
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS
0.002
Percentile
57.1%
Related for RHSA-2023:1569