Vulnerabilities

TI-2018-07662 CVE-2018-10846 · GHSA-qgw6-cgvx-vw2g

Broken or risky cryptographic algorithm in [UNKNOWN] gnutls

LOW 25

A cache-based side channel in GnuTLS implementation that leads to plain text recovery in cross-VM attack setting was found.

CVSS 3.1MEDIUM 5.6 Local Low privileges No interaction EPSS 0.00392 Published 2018-08-22 Partial fix CWE-385

TI-2018-07661 CVE-2018-10845 · GHSA-m5px-2q2g-hxc2

LOW 33

It was found that the GnuTLS implementation of HMAC-SHA-384 was vulnerable to a Lucky thirteen style attack.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.03606 Published 2018-08-22 Partial fix CWE-385

TI-2018-07660 CVE-2018-10844 · GHSA-9779-jfg9-frm3

LOW 33

It was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky thirteen style attack.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.03606 Published 2018-08-22 Partial fix CWE-385