GnuTLS incorrectly validates the first byte of padding in CBC modes

This update for gnutls fixes the following security issues :

  - CVE-2015-8313: First byte of the padding in CBC mode is     not checked (bsc#957568)

  - CVE-2015-2806: Two-byte stack overflow in     asn1_der_decoding (bsc#924828)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Hanno B&ouml;ck discovered that GnuTLS, a library implementing the TLS and SSL protocols, incorrectly validated the first padding byte in CBC modes. A remote attacker can possibly take advantage of this flaw to perform a padding oracle attack.

For Debian 6 'Squeeze', this issue has been fixed in gnutls26 version 2.8.6-1+squeeze6. We recommend you to upgrade your gnutls26 packages.

Learn more about the Debian Long Term Support (LTS) Project and how to apply these updates at: https://wiki.debian.org/LTS/

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that GnuTLS, a library implementing the TLS and SSL protocols, incorrectly validates the first byte of padding in CBC modes. A remote attacker can possibly take advantage of this flaw to perform a padding oracle attack.

ID	Name	Product	Family	Severity
87887	SUSE SLED11 / SLES11 Security Update : gnutls (SUSE-SU-2016:0077-1)	Nessus	SuSE Local Security Checks	medium
87286	Debian DLA-364-1 : gnutls26 security update	Nessus	Debian Local Security Checks	medium
87162	Debian DSA-3408-1 : gnutls26 - security update	Nessus	Debian Local Security Checks	medium

Detections

Analytics

CVE-2015-8313

medium

Tenable Plugins

medium

medium

medium