Read the docs
TI-2023-00345 Aliases CVE-2023-0361GHSA-5547-g9w2-52xj

Observable discrepancy in gnutls

Priority HIGH 68CWE-203Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
High
Impact type
Information disclosure
Confidentiality · integrity · availability
High · High · None
Fix status
Partial Red Hat: 8 fixed, 2 without a fix

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat. Impact type from CWE-203.

Summary

A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. This side-channel can be sufficient to recover the key encrypted in the RSA ciphertext across a network in a Bleichenbacher style attack. To achieve a successful decryption the attacker would need to send a large amount of specially crafted messages to the vulnerable server. By recovering the secret from the ClientKeyExchange message, the attacker would be able to decrypt the application data exchanged over that connection.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.01453 73rd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Partial Red Hat: 4 advisoriesRed Hat: 8 fixed, 2 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
—gnutlsgnutls-3.7.6—No fix listedCNA
  • gnutls Vendor— Affected gnutls-3.7.6 Fixed in — No fix listed CNA

CPE configurations NVD · 10

CPEVersionsRoleVendor
cpe:2.3:a:gnu:gnutls:3.6.8-11.el8_2:*:*:*:*:*:*:*3.6.8-11.el8_2VulnerableGNU
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*8.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*9.0VulnerableRed Hat
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*10.0VulnerableDebian
cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*36VulnerableFedoraproject
cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*37VulnerableFedoraproject
cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*38VulnerableFedoraproject
cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:converged_systems_advisor_agent:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
  • cpe:2.3:a:gnu:gnutls:3.6.8-11.el8_2:*:*:*:*:*:*:* Versions 3.6.8-11.el8_2 Vulnerable ·GNU
  • cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Red Hat
  • cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Debian
  • cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:* Versions 36 Vulnerable ·Fedoraproject
  • cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:* Versions 37 Vulnerable ·Fedoraproject
  • cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:* Versions 38 Vulnerable ·Fedoraproject
  • cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:converged_systems_advisor_agent:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp

Remediation

Red Hat 4 advisories

  • RHSA-2023:3361 Released 2023-05-31 · Red Hat rating Moderate
    gnutls security update
    • Red Hat Enterprise Linux AppStream EUS (v.8.6) gnutls-c++-3.6.16-5.el8_6.1, gnutls-dane-3.6.16-5.el8_6.1, gnutls-devel-3.6.16-5.el8_6.1 +1
    • Red Hat Enterprise Linux BaseOS EUS (v.8.6) gnutls-3.6.16-5.el8_6.1
  • RHSA-2023:1569 Released 2023-04-04 · Red Hat rating Moderate
    gnutls security and bug fix update
    • Red Hat Enterprise Linux AppStream (v. 8) gnutls-c++-3.6.16-6.el8_7, gnutls-dane-3.6.16-6.el8_7, gnutls-devel-3.6.16-6.el8_7 +1
    • Red Hat Enterprise Linux BaseOS (v. 8) gnutls-3.6.16-6.el8_7
  • RHSA-2023:1200 Released 2023-03-14 · Red Hat rating Moderate
    gnutls security and bug fix update
    • Red Hat Enterprise Linux AppStream EUS (v.9.0) gnutls-c++-3.7.6-18.el9_0, gnutls-dane-3.7.6-18.el9_0, gnutls-devel-3.7.6-18.el9_0 +1
    • Red Hat Enterprise Linux BaseOS EUS (v.9.0) gnutls-3.7.6-18.el9_0
Show 1 more Red Hat advisories
  • RHSA-2023:1141 Released 2023-03-07 · Red Hat rating Moderate
    gnutls security and bug fix update
    • Red Hat Enterprise Linux AppStream (v. 9) gnutls-c++-3.7.6-18.el9_1, gnutls-dane-3.7.6-18.el9_1, gnutls-devel-3.7.6-18.el9_1 +1
    • Red Hat Enterprise Linux BaseOS (v. 9) gnutls-3.7.6-18.el9_1

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 6AffectedNo fix planned: Out of support scope
Red Hat Enterprise Linux 7AffectedNo fix planned: Out of support scope
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2023:1569
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2023:1141
Red Hat Enterprise Linux AppStream EUS (v.8.6)Fixed RHSA-2023:3361
Red Hat Enterprise Linux AppStream EUS (v.9.0)Fixed RHSA-2023:1200
Red Hat Enterprise Linux BaseOS (v. 8)Fixed RHSA-2023:1569
Red Hat Enterprise Linux BaseOS (v. 9)Fixed RHSA-2023:1141
Red Hat Enterprise Linux BaseOS EUS (v.8.6)Fixed RHSA-2023:3361
Red Hat Enterprise Linux BaseOS EUS (v.9.0)Fixed RHSA-2023:1200

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-0361
  2. 2026-10-03 Alias added: GHSA-5547-g9w2-52xj

References

Exploit 1

Patch 1

Advisory 6

Other 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences