A Bleichenbacher type side-channel based padding oracle attack was found in the way nettle handles endian conversion of RSA decrypted PKCS#1 v1.5 data. An attacker who is able to run a process on the same physical core as the victim process, could use this flaw extract plaintext or in some cases downgrade any TLS connections to a vulnerable server.

An update of the nettle package has been released.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - nettle: Leaky data conversion exposing a manager oracle (CVE-2018-16869)

  - A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An     attacker could use this flaw to provide a manipulated ciphertext leading to application crash and denial     of service. (CVE-2021-3580)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K45616155 advisory.

  - A Bleichenbacher type side-channel based padding oracle attack was found in the way nettle handles endian     conversion of RSA decrypted PKCS#1 v1.5 data. An attacker who is able to run a process on the same     physical core as the victim process, could use this flaw extract plaintext or in some cases downgrade any     TLS connections to a vulnerable server. (CVE-2018-16869)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4990-1 advisory.

    It was discovered that Nettle incorrectly handled RSA decryption. A remote attacker could possibly use     this issue to cause Nettle to crash, resulting in a denial of service. (CVE-2021-3580)

    It was discovered that Nettle incorrectly handled certain padding oracles. A remote attacker could     possibly use this issue to perform a variant of the Bleichenbacher attack. This issue only affected Ubuntu     18.04 LTS. (CVE-2018-16869)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the version of the nettle packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - A Bleichenbacher type side-channel based padding oracle     attack was found in the way nettle handles endian     conversion of RSA decrypted PKCS#1 v1.5 data. An     attacker who is able to run a process on the same     physical core as the victim process, could use this     flaw extract plaintext or in some cases downgrade any     TLS connections to a vulnerable server.(CVE-2018-16869)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the nettle package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - A Bleichenbacher type side-channel based padding oracle     attack was found in the way nettle handles endian     conversion of RSA decrypted PKCS#1 v1.5 data. An     attacker who is able to run a process on the same     physical core as the victim process, could use this     flaw extract plaintext or in some cases downgrade any     TLS connections to a vulnerable server.(CVE-2018-16869)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the nettle packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - A Bleichenbacher type side-channel based padding oracle     attack was found in the way nettle handles endian     conversion of RSA decrypted PKCS#1 v1.5 data. An     attacker who is able to run a process on the same     physical core as the victim process, could use this     flaw extract plaintext or in some cases downgrade any     TLS connections to a vulnerable server.(CVE-2018-16869)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the nettle packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - Nettle is a cryptographic library that is designed to     fit easily in more or less any context: In crypto     toolkits for object-oriented languages (C++, Python,     Pike, ...), in applications like LSH or GNUPG, or even     in kernel space. Security Fix(es):blktrace (aka Block     IO Tracing) 1.2.0, as used with the Linux kernel and     Android, has a buffer overflow in the dev_map_read     function in btt/devmap.c because the device and devno     arrays are too small, as demonstrated by an invalid     free when using the btt program with a crafted     file.(CVE-2018-16869)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for libnettle fixes the following issues :

Security issues fixed :

  - CVE-2018-16869: Fixed a leaky data conversion exposing a     manager oracle (bsc#1118086)

This update was imported from the SUSE:SLE-15:Update update project.

Resolves CVE-2018-16869

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2018-16869

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for libnettle fixes the following issues :

Security issues fixed :

CVE-2018-16869: Fixed a leaky data conversion exposing a manager oracle (bsc#1118086)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

New nettle packages are available for Slackware 14.2 and -current to fix security issues.

ID	Name	Product	Family	Severity
202803	Photon OS 2.0: Nettle PHSA-2020-2.0-0233	Nessus	PhotonOS Local Security Checks	medium
199207	RHEL 7 : nettle (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	medium
184263	F5 Networks BIG-IP : Nettle vulnerability (K45616155)	Nessus	F5 Networks Local Security Checks	medium
150857	Ubuntu 18.04 LTS / 20.04 LTS : Nettle vulnerabilities (USN-4990-1)	Nessus	Ubuntu Local Security Checks	medium
142305	EulerOS 2.0 SP2 : nettle (EulerOS-SA-2020-2371)	Nessus	Huawei Local Security Checks	medium
141655	EulerOS Virtualization 3.0.2.2 : nettle (EulerOS-SA-2020-2206)	Nessus	Huawei Local Security Checks	medium
140836	EulerOS 2.0 SP3 : nettle (EulerOS-SA-2020-2069)	Nessus	Huawei Local Security Checks	medium
137971	EulerOS Virtualization 3.0.6.0 : nettle (EulerOS-SA-2020-1752)	Nessus	Huawei Local Security Checks	medium
136254	EulerOS Virtualization for ARM 64 3.0.2.0 : nettle (EulerOS-SA-2020-1551)	Nessus	Huawei Local Security Checks	medium
136035	Photon OS 1.0: Nettle PHSA-2020-1.0-0289	Nessus	PhotonOS Local Security Checks	medium
134804	EulerOS 2.0 SP5 : nettle (EulerOS-SA-2020-1313)	Nessus	Huawei Local Security Checks	medium
123161	openSUSE Security Update : libnettle (openSUSE-2019-1031)	Nessus	SuSE Local Security Checks	medium
121139	Fedora 29 : mingw-nettle (2019-31015766d1)	Nessus	Fedora Local Security Checks	medium
121137	Fedora 28 : mingw-nettle (2019-01afc2352f)	Nessus	Fedora Local Security Checks	medium
120924	Fedora 28 : nettle (2018-f7d9989c42)	Nessus	Fedora Local Security Checks	medium
120192	SUSE SLED15 / SLES15 Security Update : libnettle (SUSE-SU-2018:4193-1)	Nessus	SuSE Local Security Checks	medium
119865	openSUSE Security Update : libnettle (openSUSE-2018-1597)	Nessus	SuSE Local Security Checks	medium
119448	Slackware 14.2 / current : nettle (SSA:2018-339-02)	Nessus	Slackware Local Security Checks	medium

Detections

Analytics

CVE-2018-16869

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium