CVE-2020-13777High· 7.4▾ MidnightPoC availableGnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of confidentiality in TLS 1.2, and an authentication bypass in TLS 1.3). The earliest affected version is 3.6.4 (2018-09-24) because of an err…
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 40.7 · likelihood 4.5 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 1 source. Availability, not in-the-wild use.
Exploit-prediction probability, daily snapshots since Oct 14.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
22%
3 GitHub repos (last check)
GnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of confidentiality in TLS 1.2, and an authentication bypass in TLS 1.3). The earliest affected version is 3.6.4 (2018-09-24) because of an error in a 2018-09-18 commit. Until the first key rotation, the TLS server always uses wrong data in place of an encryption key derived from an application.
gnutls >= 3.6.0, < 3.6.14fedora = 31fedora = 32ubuntu_linux = 19.10ubuntu_linux = 20.04debian_linux = 10.0Upgrade past the affected range:
gnutls 3.6.14Connected by shared product, vendor, weakness, or advisory.
CVE-2024-28834Medium· 5.3A flaw was found in GnuTLS
CVE-2023-0361High· 7.4A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS
CVE-2023-5981Medium· 5.9A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding.
CVE-2022-2509High· 7.5A vulnerability found in gnutls
CVE-2021-4209Medium· 6.5A NULL pointer dereference flaw was found in GnuTLS
CVE-2021-20231Critical· 9.8A flaw was found in gnutls