The TLS implementation in GnuTLS before 2.12.23, 3.0.x before 3.0.28, and 3.1.x before 3.1.7 does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.
CVSS Details
- CVSS 3.1 Base Score: 5.9
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade gnutls | Aug 30, 2017 | Feb 8, 2013 |
| Centos_linux | — | Upgrade gnutls-develUpgrade gnutlsUpgrade gnutls-utilsUpgrade gnutls-guile | Dec 1, 2016 | Feb 8, 2013 |
| Debian | — | Upgrade gnutls28 | Jul 30, 2024 | Feb 8, 2013 |
| Gentoo Linux | — | Upgrade net-libs/gnutls. | Oct 30, 2017 | Feb 8, 2013 |
| Oracle Solaris | — | Upgrade library/gnutls to version 2.8.6-0.175.1.11.0.1.0 on Solaris 11.1Upgrade system/display-manager/gdm to version 2.30.7-0.175.1.11.0.1.0 on Solaris 11.1 | May 29, 2017 | Feb 8, 2013 |
| Oracle_linux | — | Upgrade gnutls-guileUpgrade gnutls-utilsUpgrade gnutls-develUpgrade gnutls | Oct 16, 2024 | Feb 8, 2013 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 4, 2013 |
| Suse | — | Upgrade libgnutls28-32bitUpgrade gnutls-32bitUpgrade libgnutls28-debuginfo-x86Upgrade libgnutls-openssl27Upgrade gnutls-devel-32bitUpgrade libgnutls26Upgrade libgnutlsxx28-debuginfoUpgrade libgnutls-openssl27-debuginfoUpgrade libgnutls-extra28-debuginfoUpgrade libgnutls-devel-32bitUpgrade libgnutls-extra28Upgrade libgnutls26-x86Upgrade libgnutls-openssl-develUpgrade gnutlsUpgrade gnutls-devel-64bitUpgrade libgnutls28-debuginfoUpgrade libgnutls-extra-develUpgrade gnutls-debugsourceUpgrade libgnutls28-debuginfo-32bitUpgrade libgnutls28-x86Upgrade sle-sdk-releaseUpgrade libgnutls-extra26Upgrade gnutls-develUpgrade libgnutlsxx28Upgrade libgnutls-develUpgrade gnutls-64bitUpgrade libgnutlsxx-develUpgrade libgnutls28Upgrade gnutls-debuginfoUpgrade libgnutls26-32bitUpgrade gnutls-x86 | Dec 12, 2013 | Feb 8, 2013 |
| Ubuntu | — | Upgrade libgnutls26Upgrade libgnutls13 | Nov 8, 2024 | Feb 8, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub