The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The TLS implementation in GnuTLS before 2.12.23, 3.0.x before 3.0.28, and 3.1.x before 3.1.7 does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade gnutls | Aug 30, 2017 | Feb 8, 2013 |
| Centos_linux | — | Upgrade gnutls-develUpgrade gnutlsUpgrade gnutls-guileUpgrade gnutls-utils | Dec 1, 2016 | Feb 8, 2013 |
| Debian | — | Upgrade gnutls28 | Jul 30, 2024 | Feb 8, 2013 |
| Gentoo Linux | — | Upgrade net-libs/gnutls. | Oct 30, 2017 | Feb 8, 2013 |
| Oracle Solaris | — | Upgrade library/gnutls to version 2.8.6-0.175.1.11.0.1.0 on Solaris 11.1Upgrade system/display-manager/gdm to version 2.30.7-0.175.1.11.0.1.0 on Solaris 11.1 | May 29, 2017 | Feb 8, 2013 |
| Oracle_linux | — | Upgrade gnutls-guileUpgrade gnutls-utilsUpgrade gnutlsUpgrade gnutls-devel | Oct 16, 2024 | Feb 8, 2013 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 4, 2013 |
| Suse | — | Upgrade libgnutls-devel-32bitUpgrade gnutls-debugsourceUpgrade gnutls-devel-32bitUpgrade libgnutls-extra28-debuginfoUpgrade gnutls-devel-64bitUpgrade libgnutlsxx28-debuginfoUpgrade libgnutls-openssl27-debuginfoUpgrade libgnutls-extra-develUpgrade libgnutls28-debuginfo-x86Upgrade libgnutls28-debuginfoUpgrade libgnutls28-debuginfo-32bitUpgrade libgnutls-openssl27Upgrade libgnutls-openssl-develUpgrade libgnutls28-x86Upgrade gnutlsUpgrade libgnutls26Upgrade libgnutls-extra28Upgrade gnutls-32bitUpgrade sle-sdk-releaseUpgrade libgnutls28-32bitUpgrade libgnutls26-x86Upgrade libgnutlsxx28Upgrade libgnutls28Upgrade gnutls-debuginfoUpgrade gnutls-develUpgrade libgnutls26-32bitUpgrade libgnutls-extra26Upgrade libgnutlsxx-develUpgrade libgnutls-develUpgrade gnutls-64bitUpgrade gnutls-x86 | Dec 12, 2013 | Feb 8, 2013 |
| Ubuntu | — | Upgrade libgnutls26Upgrade libgnutls13 | Nov 8, 2024 | Feb 8, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub