A Bleichenbacher type side-channel based padding oracle attack was found in the way gnutls handles verification of RSA decrypted PKCS#1 v1.5 data. An attacker who is able to run process on the same physical core as the victim process, could use this to extract plaintext or in some cases downgrade any TLS connections to a vulnerable server.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - gnutls: Heap read overflow in read-packet.c (CVE-2017-5337)

  - The TLS protocol 1.2 and earlier, as used in Mozilla Firefox, Google Chrome, Qt, and other products, can     encrypt compressed data without properly obfuscating the length of the unencrypted data, which allows man-     in-the-middle attackers to obtain plaintext HTTP headers by observing length differences during a series     of guesses in which a string in an HTTP request potentially matches an unknown string in an HTTP header,     aka a CRIME attack. (CVE-2012-4929)

  - GnuTLS before 2.9.10 does not verify the activation and expiration dates of CA certificates, which allows     man-in-the-middle attackers to spoof servers via a certificate issued by a CA certificate that is (1) not     yet valid or (2) no longer valid. (CVE-2014-8155)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - libtasn1: asn1_get_bit_der() can return negative bit length (CVE-2014-3468)

  - gnutls: HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of wrong constant (CVE-2018-10845)

  - The asn1_get_length_der function in decoding.c in GNU Libtasn1 before 2.12, as used in GnuTLS before     3.0.16 and other products, does not properly handle certain large length values, which allows remote     attackers to cause a denial of service (heap memory corruption and application crash) or possibly have     unspecified other impact via a crafted ASN.1 structure. (CVE-2012-1569)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - gnutls: certificate algorithm consistency checking issue (CVE-2015-0294)

  - gnutls: use-after-free flaw in CRL distribution points parsing (CVE-2015-3308)

  - Double free vulnerability in GnuTLS before 3.3.17 and 3.4.x before 3.4.4 allows remote attackers to cause     a denial of service via a long DistinguishedName (DN) entry in a certificate. (CVE-2015-6251)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

This plugin has been deprecated as it does not adhere to established standards for this style of check.

This update for gnutls fixes the following issues :

Security issue fixed :

CVE-2018-16868: Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification (bsc#1118087).

Non-security issue fixed: Explicitly require libnettle 3.4.1 to prevent missing symbol errors (bsc#1134856).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for gnutls fixes the following issues :

Security issue fixed :

  - CVE-2018-16868: Fixed Bleichenbacher-like side channel     leakage in PKCS#1 v1.5 verification (bsc#1118087).

Non-security issue fixed :

  - Explicitly require libnettle 3.4.1 to prevent missing     symbol errors (bsc#1134856).

This update was imported from the SUSE:SLE-15:Update update project.

This update for gnutls fixes to version 3.6.7 the following issues :

Security issued fixed :

  - CVE-2019-3836: Fixed an invalid pointer access via     malformed TLS1.3 async messages (bsc#1130682).

  - CVE-2019-3829: Fixed a double free vulnerability in the     certificate verification API (bsc#1130681).

  - CVE-2018-16868: Fixed Bleichenbacher-like side channel     leakage in PKCS#1 v1.5 verification and padding oracle     verification (bsc#1118087)

Non-security issue fixed :

  - Update gnutls to support TLS 1.3 (fate#327114) 

This update was imported from the SUSE:SLE-15:Update update project.

This update for gnutls fixes to version 3.6.7 the following issues :

Security issued fixed :

CVE-2019-3836: Fixed an invalid pointer access via malformed TLS1.3 async messages (bsc#1130682).

CVE-2019-3829: Fixed a double free vulnerability in the certificate verification API (bsc#1130681).

CVE-2018-16868: Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification and padding oracle verification (bsc#1118087)

Non-security issue fixed: Update gnutls to support TLS 1.3 (fate#327114)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Added explicit Requires for nettle >= 3.4.1

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2018-16868

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Update to upstream 3.6.5 release

  - Security fix for CVE-2018-16868

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

New gnutls packages are available for Slackware 14.2 and -current to fix security issues.

ID	Name	Product	Family	Severity
198427	RHEL 5 : gnutls (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
198376	RHEL 6 : gnutls (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	medium
198359	RHEL 7 : gnutls (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
196551	RHEL 5 : gnutls (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	critical
196534	RHEL 7 : gnutls (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	high
196513	RHEL 6 : gnutls (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	high
126442	SUSE SLED15 / SLES15 Security Update : gnutls (SUSE-SU-2019:1351-2)	Nessus	SuSE Local Security Checks	medium
125619	openSUSE Security Update : gnutls (openSUSE-2019-1477)	Nessus	SuSE Local Security Checks	medium
125465	SUSE SLED15 / SLES15 Security Update : gnutls (SUSE-SU-2019:1351-1)	Nessus	SuSE Local Security Checks	medium
124714	openSUSE Security Update : gnutls (openSUSE-2019-1353)	Nessus	SuSE Local Security Checks	medium
124454	SUSE SLED15 / SLES15 Security Update : gnutls (SUSE-SU-2019:1121-1)	Nessus	SuSE Local Security Checks	medium
121169	Fedora 28 : gnutls (2019-1a0d4443f8)	Nessus	Fedora Local Security Checks	medium
121141	Fedora 29 : gnutls (2019-99eefddc65)	Nessus	Fedora Local Security Checks	medium
121076	Fedora 28 : gnutls (2019-24dc022a51)	Nessus	Fedora Local Security Checks	medium
120549	Fedora 29 : gnutls (2018-79f7540a1e)	Nessus	Fedora Local Security Checks	medium
119447	Slackware 14.2 / current : gnutls (SSA:2018-339-01)	Nessus	Slackware Local Security Checks	medium

Detections

Analytics

CVE-2018-16868

medium

Tenable Plugins

critical

medium

high

critical

high

high

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium