The TLS implementation in GnuTLS before 2.12.23, 3.0.x before 3.0.28, and 3.1.x before 3.1.7 does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - gnutls: incorrect handling of V1 intermediate certificates (CVE-2009-5138)

  - gnutls: incorrect error handling in certificate verification (GNUTLS-SA-2014-2) (CVE-2014-0092)

  - Buffer overflow in the gnutls_session_get_data function in lib/gnutls_session.c in GnuTLS 2.12.x before     2.12.14 and 3.x before 3.0.7, when used on a client that performs nonstandard session resumption, allows     remote TLS servers to cause a denial of service (application crash) via a large SessionTicket.
    (CVE-2011-4128)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote OracleVM system is missing necessary patches to address critical security updates :

  - fix CVE-2015-0282 (#1198159)

  - fix CVE-2015-0294 (#1198159)

  - Corrected value initialization in mpi printing     (#1129241)

  - Check for expiry information in the CA certificates     (#1159778)

  - fix issue with integer padding in certificates and keys     (#1036385)

  - fix session ID length check (#1102025)

  - fix CVE-2014-0092 (#1069891)

  - fix CVE-2013-2116 - fix DoS regression in     (CVE-2013-1619) upstream patch (#966754)

  - fix CVE-2013-1619 - fix TLS-CBC timing attack (#908238)

The remote Solaris system is missing necessary patches to address security updates :

  - The TLS implementation in GnuTLS before 2.12.23, 3.0.x     before 3.0.28, and 3.1.x before 3.1.7 does not properly     consider timing side-channel attacks on a noncompliant     MAC check operation during the processing of malformed     CBC padding, which allows remote attackers to conduct     distinguishing attacks and plaintext-recovery attacks     via statistical analysis of timing data for crafted     packets, a related issue to CVE-2013-0169.
    (CVE-2013-1619)

  - The _gnutls_ciphertext2compressed function in     lib/gnutls_cipher.c in GnuTLS 2.12.23 allows remote     attackers to cause a denial of service (buffer over-read     and crash) via a crafted padding length. NOTE: this     might be due to an incorrect fix for CVE-2013-0169.
    (CVE-2013-2116)

An updated rhev-hypervisor6 package that fixes several security issues and various bugs is now available.

The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

The rhev-hypervisor6 package provides a Red Hat Enterprise Virtualization Hypervisor ISO disk image. The Red Hat Enterprise Virtualization Hypervisor is a dedicated Kernel-based Virtual Machine (KVM) hypervisor. It includes everything necessary to run and manage virtual machines: A subset of the Red Hat Enterprise Linux operating environment and the Red Hat Enterprise Virtualization Agent.

Note: Red Hat Enterprise Virtualization Hypervisor is only available for the Intel 64 and AMD64 architectures with virtualization extensions.

A flaw was found in the way QEMU-KVM emulated the e1000 network interface card when the host was configured to accept jumbo network frames, and a guest using the e1000 emulated driver was not. A remote attacker could use this flaw to crash the guest or, potentially, execute arbitrary code with root privileges in the guest.
(CVE-2012-6075)

It was discovered that GnuTLS leaked timing information when decrypting TLS/SSL protocol encrypted records when CBC-mode cipher suites were used. A remote attacker could possibly use this flaw to retrieve plain text from the encrypted packets by using a TLS/SSL server as a padding oracle. (CVE-2013-1619)

It was discovered that OpenSSL leaked timing information when decrypting TLS/SSL and DTLS protocol encrypted records when CBC-mode cipher suites were used. A remote attacker could possibly use this flaw to retrieve plain text from the encrypted packets by using a TLS/SSL or DTLS server as a padding oracle. (CVE-2013-0169)

A NULL pointer dereference flaw was found in the OCSP response verification in OpenSSL. A malicious OCSP server could use this flaw to crash applications performing OCSP verification by sending a specially crafted response. (CVE-2013-0166)

It was discovered that the TLS/SSL protocol could leak information about plain text when optional compression was used. An attacker able to control part of the plain text sent over an encrypted TLS/SSL connection could possibly use this flaw to recover other portions of the plain text. (CVE-2012-4929)

This updated package provides updated components that include fixes for various security issues. These issues have no security impact on Red Hat Enterprise Virtualization Hypervisor itself, however. The security fixes included in this update address the following CVE numbers :

CVE-2013-0292 (dbus-glib issue)

CVE-2013-0228, CVE-2013-0268, and CVE-2013-0871 (kernel issues)

CVE-2013-0338 (libxml2 issue)

This update contains the builds from the following errata :

ovirt-node: RHBA-2013:0634 https://rhn.redhat.com/errata/RHBA-2013-0634.html kernel:
RHSA-2013:0630 https://rhn.redhat.com/errata/RHSA-2013-0630.html dbus-glib: RHSA-2013:0568 https://rhn.redhat.com/errata/RHSA-2013-0568.html libcgroup:
RHBA-2013:0560 https://rhn.redhat.com/errata/RHBA-2013-0560.html vdsm:
RHBA-2013:0635 https://rhn.redhat.com/errata/RHBA-2013-0635.html selinux-policy: RHBA-2013:0618 https://rhn.redhat.com/errata/RHBA-2013-0618.html qemu-kvm-rhev:
RHSA-2013:0610 https://rhn.redhat.com/errata/RHSA-2013-0610.html glusterfs: RHBA-2013:0620 https://rhn.redhat.com/errata/RHBA-2013-0620.html gnutls:
RHSA-2013:0588 https://rhn.redhat.com/errata/RHSA-2013-0588.html ipmitool: RHBA-2013:0572 https://rhn.redhat.com/errata/RHBA-2013-0572.html libxml2:
RHSA-2013:0581 https://rhn.redhat.com/errata/RHSA-2013-0581.html openldap: RHBA-2013:0598 https://rhn.redhat.com/errata/RHBA-2013-0598.html openssl:
RHSA-2013:0587 https://rhn.redhat.com/errata/RHSA-2013-0587.html

Users of the Red Hat Enterprise Virtualization Hypervisor are advised to upgrade to this updated package, which fixes these issues.

Changes in gnutls :

  - Fix bug[ bnc#802651] CVE-2013-1619( gnutls): Luck-13     issue Add patch file: CVE-2013-1619.patch

The remote host is affected by the vulnerability described in GLSA-201310-18 (GnuTLS: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in GnuTLS. Please review       the CVE identifiers and Lucky Thirteen research paper referenced below       for details.
  Impact :

    A remote attacker could sent a specially crafted packet to cause a       Denial of Service condition. Additionally, a remote attacker could       perform man-in-the-middle attacks to recover plaintext data.
  Workaround :

    There is no known workaround at this time.

New gnutls packages are available for Slackware 12.1, 12.2, 13.0, 13.1, and 13.37 to fix security issues.

It was discovered that the fix for the CVE-2013-1619 issue introduced a regression in the way GnuTLS decrypted TLS/SSL encrypted records when CBC-mode cipher suites were used. A remote attacker could possibly use this flaw to crash a server or client application that uses GnuTLS. (CVE-2013-2116)

It was discovered that GnuTLS leaked timing information when decrypting TLS/SSL protocol encrypted records when CBC-mode cipher suites were used. A remote attacker could possibly use this flaw to retrieve plain text from the encrypted packets by using a TLS/SSL server as a padding oracle. (CVE-2013-1619)

New gnutls packages are available for Slackware 14.0 and -current to fix a security issue. Sorry about having to reissue this one -- I pulled it from ftp.gnu.org not realizing that the latest version there was actually months out of date.

New gnutls packages are available for Slackware 14.0, and -current to fix a security issue.

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0588 advisory.

    [2.8.5-10.1]
    - fix CVE-2013-1619 - fix TLS-CBC timing attack (#908238)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It was discovered that the fix for the CVE-2013-1619 issue released via SLSA-2013:0588 introduced a regression in the way GnuTLS decrypted TLS/SSL encrypted records when CBC-mode cipher suites were used. A remote attacker could possibly use this flaw to crash a server or client application that uses GnuTLS. (CVE-2013-2116)

For the update to take effect, all applications linked to the GnuTLS library must be restarted.

This GnuTLS update fixes incorrect padding which weakens the encryption. CVE-2013-1619 has been assigned to this issue.

Nadhem Alfardan and Kenny Paterson devised an attack that recovers some bits of the plaintext of a GnuTLS session that utilizes that CBC ciphersuites, by using timing information (CVE-2013-1619).

The gnutls package has been updated to latest 3.0.28 version to fix above problem.

Minor security and bugfix update from upstream.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Updated gnutls packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6.

The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

The GnuTLS library provides support for cryptographic algorithms and for protocols such as Transport Layer Security (TLS).

It was discovered that GnuTLS leaked timing information when decrypting TLS/SSL protocol encrypted records when CBC-mode cipher suites were used. A remote attacker could possibly use this flaw to retrieve plain text from the encrypted packets by using a TLS/SSL server as a padding oracle. (CVE-2013-1619)

Users of GnuTLS are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. For the update to take effect, all applications linked to the GnuTLS library must be restarted, or the system rebooted.

It was discovered that GnuTLS leaked timing information when decrypting TLS/SSL protocol encrypted records when CBC-mode cipher suites were used. A remote attacker could possibly use this flaw to retrieve plain text from the encrypted packets by using a TLS/SSL server as a padding oracle. (CVE-2013-1619)

For the update to take effect, all applications linked to the GnuTLS library must be restarted, or the system rebooted.

Nadhem Alfardan and Kenny Paterson discovered that the TLS protocol as used in GnuTLS was vulnerable to a timing side-channel attack known as the 'Lucky Thirteen' issue. A remote attacker could use this issue to perform plaintext-recovery attacks via analysis of timing data.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Update to 2.12.20.

    - Apply patches for CVE-2013-1619.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Update to 2.12.22.

    - Applied patches for CVE-2013-1619.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
198544	RHEL 6 : mingw32-gnutls (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
85142	OracleVM 3.3 : gnutls (OVMSA-2015-0101)	Nessus	OracleVM Local Security Checks	high
80630	Oracle Solaris Third-Party Patch Update : gnutls (cve_2013_1619_cryptographic_issues)	Nessus	Solaris Local Security Checks	medium
78952	RHEL 6 : rhev-hypervisor6 (RHSA-2013:0636)	Nessus	Red Hat Local Security Checks	high
75001	openSUSE Security Update : gnutls (openSUSE-SU-2013:0807-1)	Nessus	SuSE Local Security Checks	medium
70674	GLSA-201310-18 : GnuTLS: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	medium
70439	Slackware 12.1 / 12.2 / 13.0 / 13.1 / 13.37 : gnutls (SSA:2013-287-03)	Nessus	Slackware Local Security Checks	medium
69755	Amazon Linux AMI : gnutls (ALAS-2013-197)	Nessus	Amazon Linux Local Security Checks	medium
69731	Amazon Linux AMI : gnutls (ALAS-2013-172)	Nessus	Amazon Linux Local Security Checks	medium
69521	Slackware 14.0 / current : gnutls (SSA:2013-242-03)	Nessus	Slackware Local Security Checks	medium
69519	Slackware 14.0 / current : gnutls (SSA:2013-242-01)	Nessus	Slackware Local Security Checks	medium
68769	Oracle Linux 5 / 6 : gnutls (ELSA-2013-0588)	Nessus	Oracle Linux Local Security Checks	medium
66708	Scientific Linux Security Update : gnutls on SL5.x, SL6.x i386/srpm/x86_64 (20130530)	Nessus	Scientific Linux Local Security Checks	medium
66289	SuSE 10 Security Update : GnuTLS (ZYPP Patch Number 8554)	Nessus	SuSE Local Security Checks	medium
66287	SuSE 11.2 Security Update : GnuTLS (SAT Patch Number 7660)	Nessus	SuSE Local Security Checks	medium
66054	Mandriva Linux Security Advisory : gnutls (MDVSA-2013:040)	Nessus	Mandriva Local Security Checks	medium
65234	Fedora 17 : gnutls-2.12.23-1.fc17 / libtasn1-2.14-1.fc17 (2013-2984)	Nessus	Fedora Local Security Checks	medium
65036	Fedora 18 : gnutls-2.12.23-1.fc18 (2013-2892)	Nessus	Fedora Local Security Checks	medium
65032	CentOS 5 / 6 : gnutls (CESA-2013:0588)	Nessus	CentOS Local Security Checks	medium
65019	Scientific Linux Security Update : gnutls on SL5.x, SL6.x i386/x86_64 (20130304)	Nessus	Scientific Linux Local Security Checks	medium
65005	RHEL 5 / 6 : gnutls (RHSA-2013:0588)	Nessus	Red Hat Local Security Checks	medium
64928	Ubuntu 8.04 LTS / 10.04 LTS / 11.10 / 12.04 LTS / 12.10 : gnutls13, gnutls26 vulnerability (USN-1752-1)	Nessus	Ubuntu Local Security Checks	medium
64664	Fedora 17 : mingw-gnutls-2.12.20-1.fc17 (2013-2128)	Nessus	Fedora Local Security Checks	medium
64651	Fedora 18 : mingw-gnutls-2.12.22-1.fc18 (2013-2110)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2013-1619

medium

Tenable Plugins

high

high

medium

high

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium