Published: 16/01/2024 Updated: 25/03/2024

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 0

A vulnerability was found in GnuTLS. The response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from the response times of ciphertexts with correct PKCS#1 v1.5 padding. This issue may allow a remote malicious user to perform a timing side-channel attack in the RSA-PSK key exchange, potentially leading to the leakage of sensitive data. CVE-2024-0553 is designated as an incomplete resolution for CVE-2023-5981.

Vulnerable Product	Search on Vulmon	Subscribe to Product
gnu gnutls
fedoraproject fedora 39
redhat enterprise linux 8.0
redhat enterprise linux 9.0

Debian Bug report logs - #1061046 gnutls28: CVE-2024-0553 Package: src:gnutls28; Maintainer for src:gnutls28 is Debian GnuTLS Maintainers <pkg-gnutls-maint@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Tue, 16 Jan 2024 21:18:02 UTC Severity: important Tags: security, upstream ...

Synopsis Moderate: gnutls security update Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for gnutls is now available for Red Hat Enterprise Linux 9Red Hat Product Security has rated this update as having a secu ...

Synopsis Moderate: gnutls security update Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for gnutls is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a secu ...

Synopsis Moderate: gnutls security update Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for gnutls is now available for Red Hat Enterprise Linux 88 Extended Update SupportRed Hat Product Security has rated th ...

CWE-203 https://access.redhat.com/security/cve/CVE-2024-0553 https://bugzilla.redhat.com/show_bug.cgi?id=2258412 https://gitlab.com/gnutls/gnutls/-/issues/1522 https://lists.gnupg.org/pipermail/gnutls-help/2024-January/004841.html http://www.openwall.com/lists/oss-security/2024/01/19/3 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GNXKVR5YNUEBNHAHM5GSYKBZX4W2HMN2/https://access.redhat.com/errata/RHSA-2024:0533 https://access.redhat.com/errata/RHSA-2024:0627 https://security.netapp.com/advisory/ntap-20240202-0011/https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7ZEIOLORQ7N6WRPFXZSYDL2MC4LP7VFV/https://access.redhat.com/errata/RHSA-2024:0796 https://lists.debian.org/debian-lts-announce/2024/02/msg00010.html https://access.redhat.com/errata/RHSA-2024:1082 https://access.redhat.com/errata/RHSA-2024:1108 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1061046 https://nvd.nist.gov

CVE-2024-0553

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect