A vulnerability was found in GnuTLS. The response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from the response times of ciphertexts with correct PKCS#1 v1.5 padding. This issue may allow a remote attacker to perform a timing side-channel attack in the RSA-PSK key exchange, potentially leading to the leakage of sensitive data. CVE-2024-0553 is designated as an incomplete resolution for CVE-2023-5981.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-gnutlsalma-upgrade-gnutls-c++alma-upgrade-gnutls-danealma-upgrade-gnutls-develalma-upgrade-gnutls-utils | Jan 31, 2024 | Jan 16, 2024 | |
| Alpine Linux | alpine-linux-upgrade-gnutls | Mar 26, 2024 | Jan 16, 2024 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-gnutlsamazon-linux-2023-upgrade-gnutls-camazon-linux-2023-upgrade-gnutls-c-debuginfoamazon-linux-2023-upgrade-gnutls-daneamazon-linux-2023-upgrade-gnutls-dane-debuginfoamazon-linux-2023-upgrade-gnutls-debuginfoamazon-linux-2023-upgrade-gnutls-debugsourceamazon-linux-2023-upgrade-gnutls-develamazon-linux-2023-upgrade-gnutls-utilsamazon-linux-2023-upgrade-gnutls-utils-debuginfo | Feb 17, 2025 | Jan 16, 2024 | |
| Debian | debian-upgrade-gnutls28 | Feb 27, 2024 | Jan 16, 2024 | |
| Dell Powerstore Dsa2024398 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Sep 17, 2024 | |
| Dell Powerstore Dsa2024408 | dell-powerstoreos-upgrade-latest | Jan 13, 2026 | Sep 26, 2024 | |
| Dell Powerstore Dsa2024432 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Oct 29, 2024 | |
| F5 Big Ip | f5-bigip-upgrade-latest | Jun 17, 2026 | Feb 21, 2024 | |
| Gentoo Linux | gentoo-linux-upgrade-net-libs-gnutls | Jul 2, 2025 | Jan 16, 2024 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-gnutlshuawei-euleros-2_0_sp10-upgrade-gnutls-utils | Mar 13, 2024 | Jan 16, 2024 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-gnutlshuawei-euleros-2_0_sp11-upgrade-gnutls-utils | Mar 13, 2024 | Jan 16, 2024 | |
| Huawei Euleros 2_0_sp12 | huawei-euleros-2_0_sp12-upgrade-gnutlshuawei-euleros-2_0_sp12-upgrade-gnutls-utils | May 31, 2024 | Jan 16, 2024 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-gnutlshuawei-euleros-2_0_sp8-upgrade-gnutls-c++huawei-euleros-2_0_sp8-upgrade-gnutls-danehuawei-euleros-2_0_sp8-upgrade-gnutls-develhuawei-euleros-2_0_sp8-upgrade-gnutls-utils | Jul 23, 2024 | Jan 16, 2024 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-gnutlshuawei-euleros-2_0_sp9-upgrade-gnutls-utils | Apr 9, 2024 | Jan 16, 2024 | |
| Oracle_linux | — | oracle-linux-upgrade-gnutlsoracle-linux-upgrade-gnutls-coracle-linux-upgrade-gnutls-daneoracle-linux-upgrade-gnutls-develoracle-linux-upgrade-gnutls-utils | Feb 2, 2024 | Jan 16, 2024 |
| Redhat_linux | redhat-upgrade-gnutlsredhat-upgrade-gnutls-credhat-upgrade-gnutls-c-debuginforedhat-upgrade-gnutls-daneredhat-upgrade-gnutls-dane-debuginforedhat-upgrade-gnutls-debuginforedhat-upgrade-gnutls-debugsourceredhat-upgrade-gnutls-develredhat-upgrade-gnutls-utilsredhat-upgrade-gnutls-utils-debuginfo | Jan 30, 2024 | Jan 16, 2024 | |
| Suse | — | suse-upgrade-gnutlssuse-upgrade-gnutls-guilesuse-upgrade-libgnutls-develsuse-upgrade-libgnutls-devel-32bitsuse-upgrade-libgnutls30suse-upgrade-libgnutls30-32bitsuse-upgrade-libgnutls30-hmacsuse-upgrade-libgnutls30-hmac-32bitsuse-upgrade-libgnutlsxx-develsuse-upgrade-libgnutlsxx28suse-upgrade-libgnutlsxx30 | Feb 28, 2024 | Jan 16, 2024 |
| Ubuntu | ubuntu-upgrade-libgnutls30 | Jan 23, 2024 | Jan 16, 2024 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Jan 16, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub