vulnerability

FreeBSD: VID-D887B3D9-7366-11EA-B81A-001CC0382B2F: GnuTLS -- flaw in DTLS protocol implementation

Severity
8
CVSS
(AV:N/AC:L/Au:N/C:C/I:N/A:N)
Published
Mar 31, 2020
Added
Apr 1, 2020
Modified
Feb 19, 2025

Description



The GnuTLS project reports:



It was found that GnuTLS 3.6.3 introduced a regression in the DTLS


protocol implementation. This caused the DTLS client to not


contribute any randomness to the DTLS negotiation breaking the


security guarantees of the DTLS protocol.




Solution

freebsd-upgrade-package-gnutls

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.