It was found that GnuTLS's implementation of HMAC-SHA-256 was vulnerable to Lucky Thirteen-style attack. A remote attacker could use this flaw to conduct distinguishing attacks and plain text recovery attacks via statistical analysis of timing data using crafted packets.(CVE-2018-10844)

It was found that GnuTLS's implementation of HMAC-SHA-384 was vulnerable to a Lucky Thirteen-style attack. A remote attacker could use this flaw to conduct distinguishing attacks and plain text recovery attacks via statistical analysis of timing data using crafted packets.(CVE-2018-10845)

A cache-based side channel attack was found in the way GnuTLS implements CBC-mode cipher suites. An attacker could use a combination of 'Just in Time' Prime+probe and Lucky-13 attacks to recover plain text in a cross-VM attack scenario.(CVE-2018-10846)

This update for gnutls fixes the following issues :

Security issues fixed :

Improved mitigations against Lucky 13 class of attacks

  - 'Just in Time' PRIME + PROBE cache-based side channel     attack can lead to plaintext recovery (CVE-2018-10846,     bsc#1105460)

  - HMAC-SHA-384 vulnerable to Lucky thirteen attack due to     use of wrong constant (CVE-2018-10845, bsc#1105459)

  - HMAC-SHA-256 vulnerable to Lucky thirteen attack due to     not enough dummy function calls (CVE-2018-10844,     bsc#1105437)

The _asn1_check_identifier function in Libtasn1 caused a NULL pointer dereference and crash (CVE-2017-10790, bsc#1047002)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

运行版本 CORE 5.04 / MAIN 5.04 的远程 NewStart CGSL 主机安装有受多个漏洞影响的 gnutls 程序包：- 据发现，GnuTLS 对 HMAC- SHA-256 的实施容易受到 Lucky Thirteen 式攻击。远程攻击者可利用此缺陷，使用构建的数据包，通过统计分析时序数据发动区分攻击以及纯文本恢复攻击。(CVE-2018-10844) - 据发现，GnuTLS 对 HMAC- SHA-384 的实施容易受到 Lucky Thirteen 式攻击。远程攻击者可利用此缺陷，使用构建的数据包，通过统计分析时序数据发动区分攻击以及纯文本恢复攻击。(CVE-2018-10845) - 在 GnuTLS 实施 CBC-mode 密码套件的方式中发现基于缓存的边信道攻击。攻击者可利用 Just in Time Prime+probe 以及 Lucky-13 组合攻击，在跨 VM 攻击的情境下恢复纯文本。(CVE-2018-10846) 请注意，Nessus 并未针对此问题进行测试，而仅依赖应用程序自我报告的版本号。

远程 Redhat Enterprise Linux 7 主机上安装的程序包受到 RHSA-2018:3050 公告中提及的多个漏洞的影响。

    gnutls 程序包提供 GNU 传输层安全 (GnuTLS) 库，可实现诸如 SSL、TLS 和 DTLS 的加密算法和协议。

    下列程序包已升级到更新的上游版本：gnutls (3.3.29)。(BZ#1561481)

    安全修复：

    * gnutls：由于 dummy 函数调用不足，导致 HMAC-SHA-256 易受到幸运 13 攻击 (CVE-2018-10844)

    * gnutls：由于使用错误的常数，导致 HMAC-SHA-384 易受到幸运 13 攻击 (CVE-2018-10845)

    * gnutls：Just in Time PRIME + PROBE 基于缓存的边信道攻击可导致恢复明文 (CVE-2018-10846)

    有关此安全问题的详细信息，包括其影响、CVSS 分数和其他相关信息，请参阅列于“参考”部分的 CVE 页面。

    其他变更：

    如需有关此发行版本的详细变更信息，请参阅可从“参考”部分链接的 Red Hat Enterprise Linux 7.6 版本说明。

Tenable 已直接从 Red Hat Enterprise Linux 安全公告中提取上述描述块。

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

Eyal Ronen、Kenneth G. Paterson 和 Adi Shamir 发现 GnuTLS 容易受到名为“Lucky Thirteen”问题的时序边信道攻击。远程攻击者可利用此问题，通过定时数据分析执行明文恢复攻击。此问题仅影响 Ubuntu 16.04 LTS 和 Ubuntu 18.04 LTS。
（CVE-2018-10844、CVE-2018-10845、CVE-2018-10846）

Tavis Ormandy 发现，验证特定 X.509 凭证时，GnuTLS 未正确处理内存。远程攻击者可以利用此问题造成 GnuTLS 崩溃，从而导致拒绝服务或执行任意代码。此问题仅影响 Ubuntu 18.04 LTS、Ubuntu 18.10 和 Ubuntu 19.04。(CVE-2019-3829)

发现 GnuTLS 未能正确处理某些 post-handshake 消息。远程攻击者可以利用此问题造成 GnuTLS 崩溃，从而导致拒绝服务或执行任意代码。此问题仅影响 Ubuntu 18.10 和 Ubuntu 19.04。(CVE-2019-3836)

请注意，Tenable Network Security 已直接从 Ubuntu 安全公告中提取上述描述块。Tenable 已尝试在不引入其他问题的情况下，尽可能进行自动清理和排版。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - It was found that the GnuTLS implementation of HMAC-SHA-384 was vulnerable to a Lucky thirteen style     attack. Remote attackers could use this flaw to conduct distinguishing attacks and plain text recovery     attacks via statistical analysis of timing data using crafted packets. (CVE-2018-10845)

Note that Nessus relies on the presence of the package as reported by the vendor.

This update for gnutls fixes the following issues :

This update for gnutls fixes the following issues :

Security issues fixed :

Improved mitigations against Lucky 13 class of attacks

'Just in Time' PRIME + PROBE cache-based side channel attack can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)

HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of wrong constant (CVE-2018-10845, bsc#1105459)

HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not enough dummy function calls (CVE-2018-10844, bsc#1105437)

The _asn1_check_identifier function in Libtasn1 caused a NULL pointer dereference and crash (CVE-2017-10790, bsc#1047002)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security Fix(es) :

  - gnutls: HMAC-SHA-256 vulnerable to Lucky thirteen attack     due to not enough dummy function calls (CVE-2018-10844)

  - gnutls: HMAC-SHA-384 vulnerable to Lucky thirteen attack     due to use of wrong constant (CVE-2018-10845)

  - gnutls: 'Just in Time' PRIME + PROBE cache-based side     channel attack can lead to plaintext recovery     (CVE-2018-10846)

An update for gnutls is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

The following packages have been upgraded to a later upstream version:
gnutls (3.3.29). (BZ#1561481)

Security Fix(es) :

* gnutls: HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not enough dummy function calls (CVE-2018-10844)

* gnutls: HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of wrong constant (CVE-2018-10845)

* gnutls: 'Just in Time' PRIME + PROBE cache-based side channel attack can lead to plaintext recovery (CVE-2018-10846)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes :

For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.6 Release Notes linked from the References section.

According to the version of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - It was found that GnuTLS's implementation of     HMAC-SHA-384 was vulnerable to a Lucky Thirteen-style     attack. A remote attacker could use this flaw to     conduct distinguishing attacks and plain text recovery     attacks via statistical analysis of timing data using     crafted packets.(CVE-2018-10845)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the gnutls packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - It was found that the GnuTLS implementation of     HMAC-SHA-384 was vulnerable to a Lucky thirteen style     attack. Remote attackers could use this flaw to conduct     distinguishing attacks and plain text recovery attacks     via statistical analysis of timing data using crafted     packets.(CVE-2018-10845)

  - It was found that the GnuTLS implementation of     HMAC-SHA-256 was vulnerable to a Lucky thirteen style     attack. Remote attackers could use this flaw to conduct     distinguishing attacks and plaintext-recovery attacks     via statistical analysis of timing data using crafted     packets.(CVE-2018-10844)

  - A flaw was found in the way TLS 1.2 could use the MD5     hash function for signing ServerKeyExchange and Client     Authentication packets during a TLS handshake. A     man-in-the-middle attacker able to force a TLS     connection to use the MD5 hash function could use this     flaw to conduct collision attacks to impersonate a TLS     server or an authenticated TLS client.(CVE-2015-7575)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

https://lists.gnupg.org/pipermail/gnutls-help/2020-March/004642.html

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

執行 CORE 5.04 / MAIN 5.04 版的遠端 NewStart CGSL 主機安裝了受多個弱點影響的 gnutls 套件：- 據發現，GnuTLS 對 HMAC- SHA-256 的實作容易受到 Lucky Thirteen 式攻擊。遠端攻擊者可利用此缺陷，使用特製的封包，透過統計分析計時資料發動區分攻擊以及純文字復原攻擊。(CVE-2018-10844) - 據發現，GnuTLS 對 HMAC- SHA-384 的實作容易受到 Lucky Thirteen 式攻擊。遠端攻擊者可利用此缺陷，使用特製的封包，透過統計分析計時資料發動區分攻擊以及純文字復原攻擊。(CVE-2018-10845) - 在 GnuTLS 實作 CBC 模式加密套件的方式中發現一個快取型旁路攻擊。攻擊者可利用 Just in Time Prime+probe 以及 Lucky-13 攻擊的組合，在跨 VM 攻擊的情境下復原純文字。(CVE-2018-10846) 請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼。

遠端 Redhat Enterprise Linux 7 主機上安裝的套件受到 RHSA-2018:3050 公告中提及的多個弱點影響。

    gnutls 套件提供 GNU Transport Layer Security (GnuTLS) 程式庫，可實施如 SSL、TLS 和 DTLS 的密碼編譯演算法及通訊協定。

    下列套件已升級至更新的上游版本: gnutls (3.3.29)。(BZ#1561481)

    安全性修正:

    * gnutls: 由於 dummy 函式呼叫不足，導致 HMAC-SHA-256 易受 Lucky thirteen 攻擊 (CVE-2018-10844)

    * gnutls: 由於使用錯誤的常數，導致 HMAC-SHA-384 易受 Lucky thirteen 攻擊 (CVE-2018-10845)

    * gnutls: Just in Time PRIME + PROBE 快取型旁路攻擊可能導致還原為純文字 (CVE-2018-10846)

    如需安全性問題的詳細資料，包括影響、CVSS 分數及其他相關資訊，請參閱〈參考資料〉一節列出的 CVE 頁面。

    其他變更:

    如需有關此發行版本的詳細變更資訊，請參閱可從「參考資料」一節連結的 Red Hat Enterprise Linux 7.6 版本資訊。

Tenable 已直接從 Red Hat Enterprise Linux 安全公告擷取前置描述區塊。

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

Eyal Ronen、Kenneth G. Paterson 和 Adi Shamir 發現 GnuTLS 容易遭受名為「Lucky Thirteen」問題的計時旁路攻擊。遠端攻擊者可能利用此問題透過計時資料的分析，執行純文字復原攻擊。此問題僅影響 Ubuntu 16.04 LTS 和 Ubuntu 18.04 LTS。
(CVE-2018-10844、CVE-2018-10845、CVE-2018-10846)

Tavis Ormandy 發現，確認某些 X.509 憑證時，GnuTLS 未正確處理記憶體。遠端攻擊者可利用此問題造成 GnuTLS 損毀，進而導致拒絕服務或可能執行任意程式碼。此問題僅影響了 Ubuntu 18.04 LTS、Ubuntu 18.10 和 Ubuntu 19.04。(CVE-2019-3829)

據發現，GnuTLS 未正確處理某些後協議訊息。遠端攻擊者可利用此問題造成 GnuTLS 損毀，進而導致拒絕服務或可能執行任意程式碼。此問題僅影響了 Ubuntu 18.10 和 Ubuntu 19.04。(CVE-2019-3836)。

請注意，Tenable Network Security 已直接從 Ubuntu 安全性公告擷取前述描述區塊。Tenable 已盡量在不造成其他問題的前提下，嘗試自動清理並將其格式化。

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
119503	Amazon Linux 2 : gnutls (ALAS-2018-1120)	Nessus	Amazon Linux Local Security Checks	2018/12/10	2024/7/16	medium
117702	SUSE SLED12 / SLES12 Security Update : gnutls (SUSE-SU-2018:2842-1)	Nessus	SuSE Local Security Checks	2018/9/25	2024/8/5	medium
127268	NewStart CGSL CORE 5.04 / MAIN 5.04：gnutls 多个漏洞 (NS-SA-2019-0068)	Nessus	NewStart CGSL Local Security Checks	2019/8/12	2021/1/14	medium
118516	RHEL 7：gnutls (RHSA-2018:3050)	Nessus	Red Hat Local Security Checks	2018/10/31	2025/4/15	medium
125622	Ubuntu 16.04 LTS / 18.04 LTS：GnuTLS 漏洞 (USN-3999-1)	Nessus	Ubuntu Local Security Checks	2019/5/31	2025/9/3	medium
221704	Linux Distros Unpatched Vulnerability : CVE-2018-10845	Nessus	Misc.	2025/3/4	2025/9/3	medium
117696	SUSE SLES12 Security Update : gnutls (SUSE-SU-2018:2825-1)	Nessus	SuSE Local Security Checks	2018/9/25	2024/8/5	medium
119184	Scientific Linux Security Update : gnutls on SL7.x x86_64 (20181030)	Nessus	Scientific Linux Local Security Checks	2018/11/27	2024/7/18	medium
119690	CentOS 7 : gnutls (CESA-2018:3050)	Nessus	CentOS Local Security Checks	2018/12/17	2024/7/16	medium
123586	EulerOS 2.0 SP2 : gnutls (EulerOS-SA-2019-1112)	Nessus	Huawei Local Security Checks	2019/4/2	2024/6/6	medium
124891	EulerOS Virtualization for ARM 64 3.0.1.0 : gnutls (EulerOS-SA-2019-1388)	Nessus	Huawei Local Security Checks	2019/5/14	2021/2/9	medium
136416	Fedora 31 : mingw-gnutls (2020-d14280a6e8)	Nessus	Fedora Local Security Checks	2020/5/8	2024/3/13	high
127268	NewStart CGSL CORE 5.04 / MAIN 5.04：gnutls 多個弱點 (NS-SA-2019-0068)	Nessus	NewStart CGSL Local Security Checks	2019/8/12	2021/1/14	medium
118516	RHEL 7: gnutls (RHSA-2018:3050)	Nessus	Red Hat Local Security Checks	2018/10/31	2025/4/15	medium
125622	Ubuntu 16.04 LTS / 18.04 LTS：GnuTLS 弱點 (USN-3999-1)	Nessus	Ubuntu Local Security Checks	2019/5/31	2025/9/3	medium

检测

插件搜索

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

high

medium

medium

medium