According to the versions of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange     differ from response times of ciphertexts with correct PKCS#1 v1.5 padding. (CVE-2023-5981)

  - A vulnerability was found in GnuTLS. The response times to malformed ciphertexts in RSA-PSK     ClientKeyExchange differ from the response times of ciphertexts with correct PKCS#1 v1.5 padding. This     issue may allow a remote attacker to perform a timing side-channel attack in the RSA-PSK key exchange,     potentially leading to the leakage of sensitive data. CVE-2024-0553 is designated as an incomplete     resolution for CVE-2023-5981. (CVE-2024-0553)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8502-1 advisory.

    It was discovered that GnuTLS had a timing side-channel when processing malformed ciphertexts in RSA-PSK     ClientKeyExchange. A remote attacker could possibly use this issue to recover sensitive information. This     issue only affected Ubuntu 18.04 LTS. (CVE-2024-0553)

    Bing Shi discovered that GnuTLS incorrectly handled decoding certain DER-encoded certificates. A remote     attacker could possibly use this issue to cause GnuTLS to consume resources, leading to a denial of     service. This issue only affected Ubuntu 18.04 LTS. (CVE-2024-12243)

    Luigino Camastra discovered that GnuTLS incorrectly handled certain PKCS11 token labels. A remote attacker     could use this issue to cause GnuTLS to crash, resulting in a denial of service, or possibly execute     arbitrary code. The default compiler options for affected releases should reduce the vulnerability to a     denial of service. (CVE-2025-9820)

    Tim Scheckenbach discovered that GnuTLS incorrectly handled malicious certificates containing a large     number of name constraints and subject alternative names. A remote attacker could possibly use this issue     to cause GnuTLS to consume resources, resulting in a denial of service. This issue only affected Ubuntu     18.04 LTS and Ubuntu 20.04 LTS. (CVE-2025-14831)

    Oleh Konko and Joshua Rogers discovered that GnuTLS did not properly handle case-insensitive name     constraints in certain cases. A remote attacker could possibly use this issue to bypass certificate     validation, leading to a machine-in-the-middle attack. (CVE-2026-3833)

    Joshua Rogers discovered that GnuTLS did not properly handle very short premaster secrets in certain RSA     key exchange cases with PKCS#11-backed server keys. A remote attacker could possibly use this issue to     obtain sensitive information. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.
    (CVE-2026-5260)

    Joshua Rogers discovered that GnuTLS did not properly handle malformed DTLS handshake fragments in certain     cases. A remote attacker could possibly use this issue to obtain sensitive information, or cause a denial     of service. This issue only affected Ubuntu 20.04 LTS. (CVE-2026-33845)

    Haruto Kimura, Oscar Reparaz, and Zou Dikai discovered that GnuTLS did not properly validate DTLS     handshake fragment lengths in certain cases. A remote attacker could possibly use this issue to cause     GnuTLS to crash, resulting in a denial of service, or execute arbitrary code. (CVE-2026-33846)

    Joshua Rogers discovered that GnuTLS did not properly order DTLS packets with duplicate sequence numbers     in certain cases. A remote attacker could possibly use this issue to cause GnuTLS to crash, resulting in a     denial of service. (CVE-2026-42009)

    Joshua Rogers discovered that GnuTLS did not properly handle usernames containing NUL characters in     certain RSA-PSK configurations. A remote attacker could possibly use this issue to bypass authentication     and gain unintended access to services. This issue only affected Ubuntu 20.04 LTS. (CVE-2026-42010)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1082 advisory.

    The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements     cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

    Security Fix(es):

    * gnutls: incomplete fix for CVE-2023-5981 (CVE-2024-0553)

    * gnutls: rejects certificate chain with distributed trust (CVE-2024-0567)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A vulnerability was found in GnuTLS. The response times to malformed ciphertexts in RSA-PSK     ClientKeyExchange differ from the response times of ciphertexts with correct PKCS#1 v1.5 padding. This     issue may allow a remote attacker to perform a timing side-channel attack in the RSA-PSK key exchange,     potentially leading to the leakage of sensitive data. CVE-2024-0553 is designated as an incomplete     resolution for CVE-2023-5981.(CVE-2024-0553)

    A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with     distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure.
    This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service     attack.(CVE-2024-0567)

Tenable has extracted the preceding description block directly from the EulerOS gnutls security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0638-2 advisory.

    - CVE-2024-0567: Fixed an incorrect rejection of certificate chains       with distributed trust (bsc#1218862).
    - CVE-2024-0553: Fixed a timing attack against the RSA-PSK key       exchange, which could lead to the leakage of sensitive data       (bsc#1218865).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3740 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-3740-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                       Guilhem Moulin     February 26, 2024                             https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : gnutls28     Version        : 3.6.7-4+deb10u12     CVE ID         : CVE-2024-0553     Debian Bug     : 1061046

    Hubert Kario discovered that GnuTLS, a portable library which implements     the Transport Layer Security and Datagram Transport Layer Security     protocols, was vulnerable to timing side-channel attack in the RSA-PSK     key exchange, which could lead to leakage of sensitive data.  The issue     stems from an incomplete resolution for CVE-2023-5981.

    This vulnerability is also known as GNUTLS-SA-2024-01-14.

    For Debian 10 buster, this problem has been fixed in version     3.6.7-4+deb10u12.

    We recommend that you upgrade your gnutls28 packages.

    For the detailed security status of gnutls28 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/gnutls28

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:0533 advisory.

  - A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange     differ from response times of ciphertexts with correct PKCS#1 v1.5 padding. (CVE-2023-5981)

  - A vulnerability was found in GnuTLS. The response times to malformed ciphertexts in RSA-PSK     ClientKeyExchange differ from the response times of ciphertexts with correct PKCS#1 v1.5 padding. This     issue may allow a remote attacker to perform a timing side-channel attack in the RSA-PSK key exchange,     potentially leading to the leakage of sensitive data. CVE-2024-0553 is designated as an incomplete     resolution for CVE-2023-5981. (CVE-2024-0553)

  - A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with     distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure.
    This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack.
    (CVE-2024-0567)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:0627 advisory.

    The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements     cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

    Security Fix(es):

    * gnutls: incomplete fix for CVE-2023-5981 (CVE-2024-0553)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-7497:03 advisory.

    * gnutls: incomplete fix for CVE-2023-5981 (CVE-2024-0553)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 8.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0746 advisory.

    This advisory aggregates security fixes for the gnutls SRPM in CIQ FIPS 8.10 Certified. It addresses 11     CVEs: CVE-2006-0645, CVE-2006-4790, CVE-2018-16868, CVE-2019-3829, CVE-2019-3836, and 6 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0423 advisory.

    This advisory aggregates security fixes for the gnutls SRPM in CIQ LTS 9.2. It addresses 3 CVEs:
    CVE-2023-5981, CVE-2024-0567, CVE-2024-0553.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
192996	EulerOS 2.0 SP9 : gnutls (EulerOS-SA-2024-1507)	Nessus	Huawei Local Security Checks	2024/4/8	2024/4/8	high
325430	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : GnuTLS vulnerabilities (USN-8502-1)	Nessus	Ubuntu Local Security Checks	2026/7/7	2026/7/7	critical
191539	RHEL 9 : gnutls (RHSA-2024:1082)	Nessus	Red Hat Local Security Checks	2024/3/5	2024/11/7	high
192001	EulerOS 2.0 SP10 : gnutls (EulerOS-SA-2024-1312)	Nessus	Huawei Local Security Checks	2024/3/12	2024/3/12	high
198213	EulerOS 2.0 SP12 : gnutls (EulerOS-SA-2024-1763)	Nessus	Huawei Local Security Checks	2024/5/30	2024/5/30	high
196939	SUSE SLES15: gnutls / libgnutls-devel / libgnutls30 / libgnutls30-32bit / etc (SUSE-SU-2024:0638-2)	Nessus	SuSE Local Security Checks	2024/5/14	2026/6/25	high
190998	Debian dla-3740 : gnutls-bin - security update	Nessus	Debian Local Security Checks	2024/2/26	2025/1/22	critical
189757	AlmaLinux 9 : gnutls (ALSA-2024:0533)	Nessus	Alma Linux Local Security Checks	2024/1/30	2024/1/30	high
189852	RHEL 8 : gnutls (RHSA-2024:0627)	Nessus	Red Hat Local Security Checks	2024/1/31	2024/11/7	high
292509	MiracleLinux 8 : gnutls-3.6.16-8.el8_9.1.ML.1 (AXSA:2024-7497:03)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
353755	Rocky Linux 8.10 [CIQ] Security Update: gnutls / gnutls-c++ / gnutls-c++-debuginfo / gnutls-dane / etc Multiple Vulnerabilities (ciqsa-2026_0746)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	high
354835	Rocky Linux 9.2 [CIQ] Security Update: gnutls / gnutls-c++ / gnutls-c++-debuginfo / gnutls-dane / etc Multiple Vulnerabilities (ciqsa-2026_0423)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	high

检测

插件搜索

high

critical

high

high

high

high

critical

high

high

high

high

high