English | Deutsch | Español | Português
 UserID:
 Passwd:
new user
 About:   Dedicated  | Advanced  | Standard  | Recurring  | No Risk  | Desktop  | Basic  | Single  | Security Seal  | FAQ
  Price/Feature Summary  | Order  | New Vulnerabilities  | Confidentiality  | Vulnerability Search
 Vulnerability   
Search   
    Search 143769 CVE descriptions
and 71225 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.891560
Category:Debian Local Security Checks
Title:Debian LTS Advisory ([SECURITY] [DLA 1560-1] gnutls28 security update)
Summary:A set of vulnerabilities was discovered in GnuTLS which allowed;attackers to do plain text recovery on TLS connections with certain;cipher types.;;CVE-2018-10844;;It was found that the GnuTLS implementation of HMAC-SHA-256 was;vulnerable to a Lucky thirteen style attack. Remote attackers;could use this flaw to conduct distinguishing attacks and;plaintext-recovery attacks via statistical analysis of timing data;using crafted packets.;;CVE-2018-10845;;It was found that the GnuTLS implementation of HMAC-SHA-384 was;vulnerable to a Lucky thirteen style attack. Remote attackers;could use this flaw to conduct distinguishing attacks and plain;text recovery attacks via statistical analysis of timing data;using crafted packets.;;CVE-2018-10846;;A cache-based side channel in GnuTLS implementation that leads to;plain text recovery in cross-VM attack setting was found. An;attacker could use a combination of 'Just in Time' Prime+probe;attack in combination with Lucky-13 attack to recover plain text;using crafted packets.
Description:Summary:
A set of vulnerabilities was discovered in GnuTLS which allowed
attackers to do plain text recovery on TLS connections with certain
cipher types.

CVE-2018-10844

It was found that the GnuTLS implementation of HMAC-SHA-256 was
vulnerable to a Lucky thirteen style attack. Remote attackers
could use this flaw to conduct distinguishing attacks and
plaintext-recovery attacks via statistical analysis of timing data
using crafted packets.

CVE-2018-10845

It was found that the GnuTLS implementation of HMAC-SHA-384 was
vulnerable to a Lucky thirteen style attack. Remote attackers
could use this flaw to conduct distinguishing attacks and plain
text recovery attacks via statistical analysis of timing data
using crafted packets.

CVE-2018-10846

A cache-based side channel in GnuTLS implementation that leads to
plain text recovery in cross-VM attack setting was found. An
attacker could use a combination of 'Just in Time' Prime+probe
attack in combination with Lucky-13 attack to recover plain text
using crafted packets.

Affected Software/OS:
gnutls28 on Debian Linux

Solution:
For Debian 8 'Jessie', these problems have been fixed in version
3.3.30-0+deb8u1. It was found to be more practical to update to the
latest upstream version of the 3.3.x branch since upstream's fixes
were rather invasive and required cipher list changes anyways. This
will facilitate future LTS updates as well.

This change therefore also includes the following major policy
changes, as documented in the NEWS file:

* ARCFOUR (RC4) and SSL 3.0 are no longer included in the default
priorities list. Those have to be explicitly enabled, e.g., with
a string like 'NORMAL:+ARCFOUR-128' or 'NORMAL:+VERS-SSL3.0',
respectively.

* The ciphers utilizing HMAC-SHA384 and SHA256 have been removed
from the default priority strings. They are not necessary for
compatibility or other purpose and provide no advantage over
their SHA1 counter-parts, as they all depend on the legacy TLS
CBC block mode.

* Follow closely RFC5280 recommendations and use UTCTime for dates
prior to 2050.

* Require strict DER encoding for certificates, OCSP requests,
private keys, CRLs and certificate requests, in order to reduce
issues due to the complexity of BER rules.

* Refuse to import v1 or v2 certificates that contain extensions.

API and ABI compatibility is retained, however, although new symbols
have been added. Many bugfixes are also included in the upload. See
the provided upstream changelog for more details.

We recommend that you upgrade your gnutls28 packages and do not expect
significant breakage.

CVSS Score:
4.3

CVSS Vector:
AV:N/AC:M/Au:N/C:P/I:N/A:N

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2018-10844
Common Vulnerability Exposure (CVE) ID: CVE-2018-10845
Common Vulnerability Exposure (CVE) ID: CVE-2018-10846
CopyrightCopyright (c) 2018 Greenbone Networks GmbH http://greenbone.net

This is only one of 71225 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.

New User Registration
Email:
UserID:
Passwd:
Please email me your monthly newsletters, informing the latest services, improvements & surveys.
Please email me a vulnerability test announcement whenever a new test is added.
   Privacy
Registered User Login
 
UserID:   
Passwd:  

 Forgot userid or passwd?
Email/Userid:




Home | About Us | Contact Us | Partner Programs | Developer APIs | Privacy | Mailing Lists | Abuse
Security Audits | Managed DNS | Network Monitoring | Site Analyzer | Internet Research Reports
Web Probe

© 1998-2019 E-Soft Inc. All rights reserved.