A Bleichenbacher type side-channel based padding oracle attack was found in the way gnutls handles verification of RSA decrypted PKCS#1 v1.5 data. An attacker who is able to run process on the same physical core as the victim process, could use this to extract plaintext or in some cases downgrade any TLS connections to a vulnerable server.
CVSS Details
- CVSS 3.1 Base Score: 5.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N)
- CVSS 3.0 Base Score: 4.7
- CVSS 3.0 Vector: (CVSS:3.0/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade gnutls28 | Jul 30, 2024 | Dec 3, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 3, 2018 |
| Suse | — | Upgrade libgnutlsxx-develUpgrade libgnutls30Upgrade libgnutls-develUpgrade gnutlsUpgrade libgnutls30-hmacUpgrade libgnutlsxx28Upgrade libgnutls-dane-develUpgrade libgnutls-devel-32bitUpgrade libgnutls30-hmac-32bitUpgrade libgnutls-dane0Upgrade gnutls-guileUpgrade libgnutls30-32bit | May 9, 2019 | Dec 3, 2018 |
| Ubuntu | — | Upgrade gnutls28 | Nov 19, 2024 | Dec 3, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub