The TLS implementation in GnuTLS before 2.12.23, 3.0.x before 3.0.28, and 3.1.x before 3.1.7 does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.
CVSS Details
- CVSS 3.1 Base Score: 5.9
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade gnutls | Aug 30, 2017 | Feb 8, 2013 |
| Centos_linux | — | Upgrade gnutls-utilsUpgrade gnutls-guileUpgrade gnutls-develUpgrade gnutls | Dec 1, 2016 | Feb 8, 2013 |
| Debian | — | Upgrade gnutls28 | Jul 30, 2024 | Feb 8, 2013 |
| Gentoo Linux | — | Upgrade net-libs/gnutls. | Oct 30, 2017 | Feb 8, 2013 |
| Oracle Solaris | — | Upgrade library/gnutls to version 2.8.6-0.175.1.11.0.1.0 on Solaris 11.1Upgrade system/display-manager/gdm to version 2.30.7-0.175.1.11.0.1.0 on Solaris 11.1 | May 29, 2017 | Feb 8, 2013 |
| Oracle_linux | — | Upgrade gnutls-develUpgrade gnutlsUpgrade gnutls-utilsUpgrade gnutls-guile | Oct 16, 2024 | Feb 8, 2013 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 4, 2013 |
| Suse | — | Upgrade libgnutls28-x86Upgrade libgnutls26-x86Upgrade libgnutls-openssl-develUpgrade libgnutls-extra-develUpgrade gnutls-devel-32bitUpgrade gnutls-debugsourceUpgrade libgnutls28-debuginfoUpgrade libgnutls28-32bitUpgrade libgnutls-devel-32bitUpgrade gnutlsUpgrade libgnutls26Upgrade libgnutlsxx28-debuginfoUpgrade gnutls-devel-64bitUpgrade libgnutls-openssl27-debuginfoUpgrade sle-sdk-releaseUpgrade libgnutls-openssl27Upgrade gnutls-32bitUpgrade libgnutls-extra28-debuginfoUpgrade libgnutls28-debuginfo-x86Upgrade libgnutls28-debuginfo-32bitUpgrade libgnutls-extra28Upgrade gnutls-x86Upgrade libgnutlsxx28Upgrade libgnutls-develUpgrade gnutls-64bitUpgrade gnutls-develUpgrade gnutls-debuginfoUpgrade libgnutls-extra26Upgrade libgnutlsxx-develUpgrade libgnutls26-32bitUpgrade libgnutls28 | Dec 12, 2013 | Feb 8, 2013 |
| Ubuntu | — | Upgrade libgnutls26Upgrade libgnutls13 | Nov 8, 2024 | Feb 8, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub