gnutls: TLS CBC padding timing attack (lucky-13)
Published Feb 8, 2013
4.0
MEDIUMCVSS 2.0
EPSS 6.44%
Description
The TLS implementation in GnuTLS before 2.12.23, 3.0.x before 3.0.28, and 3.1.x before 3.1.7 does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.
Affected products
No data.
Configuration 1
- 2.0.0
- 2.0.1
- 2.0.2
- 2.0.3
- 2.0.4
- 2.1.0
- 2.1.1
- 2.1.2
- 2.1.3
- 2.1.4
- 2.1.5
- 2.1.6
- 2.1.7
- 2.1.8
- 2.2.0
- 2.2.1
- 2.2.2
- 2.2.3
- 2.2.4
- 2.2.5
- 2.3.0
- 2.3.1
- 2.3.2
- 2.3.3
- 2.3.4
- 2.3.5
- 2.3.6
- 2.3.7
- 2.3.8
- 2.3.9
- 2.3.10
- 2.3.11
- 2.4.0
- 2.4.1
- 2.4.2
- 2.4.3
- 2.5.0
- 2.6.0
- 2.6.1
- 2.6.2
- 2.6.3
- 2.6.4
- 2.6.5
- 2.6.6
- 2.7.4
- 2.8.0
- 2.8.1
- 2.8.2
- 2.8.3
- 2.8.4
- 2.8.5
- 2.8.6
- 2.10.0
- 2.10.1
- 2.10.2
- 2.10.3
- 2.10.4
- 2.10.5
- 2.12.0
- 2.12.1
- 2.12.2
- 2.12.3
- 2.12.4
- 2.12.5
- 2.12.6
- 2.12.6.1
- 2.12.7
- 2.12.8
- 2.12.9
- 2.12.10
- 2.12.11
- 2.12.12
- 2.12.13
- 2.12.14
- 2.12.15
- 2.12.16
- 2.12.17
- 2.12.18
- 2.12.19
- 2.12.20
- 2.12.21
- 2.12.22
Configuration 2
- 3.0
- 3.0.0
- 3.0.1
- 3.0.2
- 3.0.3
- 3.0.4
- 3.0.5
- 3.0.6
- 3.0.7
- 3.0.8
- 3.0.9
- 3.0.10
- 3.0.11
- 3.0.12
- 3.0.13
- 3.0.14
- 3.0.15
- 3.0.16
- 3.0.17
- 3.0.18
- 3.0.19
- 3.0.20
- 3.0.21
- 3.0.22
- 3.0.23
- 3.0.24
- 3.0.25
- 3.0.26
- 3.0.27
No data.
RHEV 3.X Hypervisor and Agents for RHEL-6
rhev-hypervisor6-0:6.4-20130306.2.el6_4
Fixed · RHSA-2013:0636
Red Hat Enterprise Linux 5
gnutls-0:1.4.1-10.el5_9.1
Fixed · RHSA-2013:0588
Red Hat Enterprise Linux 6
gnutls-0:2.8.5-10.el6_4.1
Fixed · RHSA-2013:0588
Red Hat Enterprise Linux 6
mingw32-gnutls
Will not fix
| Product | Package | State | Advisory |
|---|---|---|---|
| RHEV 3.X Hypervisor and Agents for RHEL-6 | rhev-hypervisor6-0:6.4-20130306.2.el6_4 | Fixed | RHSA-2013:0636 |
| Red Hat Enterprise Linux 5 | gnutls-0:1.4.1-10.el5_9.1 | Fixed | RHSA-2013:0588 |
| Red Hat Enterprise Linux 6 | gnutls-0:2.8.5-10.el6_4.1 | Fixed | RHSA-2013:0588 |
| Red Hat Enterprise Linux 6 | mingw32-gnutls | Will not fix | n/a |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (20)
- http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00001.html vendor-advisoryx_refsource_SUSE
- http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00003.html vendor-advisoryx_refsource_SUSE
- http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00009.html vendor-advisoryx_refsource_SUSE
- http://lists.opensuse.org/opensuse-updates/2013-05/msg00023.html vendor-advisoryx_refsource_SUSE
- http://nmav.gnutls.org/2013/02/time-is-money-for-cbc-ciphersuites.html x_refsource_CONFIRM
- http://openwall.com/lists/oss-security/2013/02/05/24 mailing-listx_refsource_MLIST
- http://rhn.redhat.com/errata/RHSA-2013-0588.html vendor-advisoryx_refsource_REDHAT
- http://secunia.com/advisories/57260 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/57274 third-party-advisoryx_refsource_SECUNIA
- http://www.gnutls.org/security.html#GNUTLS-SA-2013-1 x_refsource_CONFIRM
- http://www.isg.rhul.ac.uk/tls/
- http://www.isg.rhul.ac.uk/tls/TLStiming.pdf x_refsource_MISC
- http://www.ubuntu.com/usn/USN-1752-1 vendor-advisoryx_refsource_UBUNTU
- https://access.redhat.com/security/cve/CVE-2013-1619 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=908238 Issue Tracking
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-1654 Advisory
- https://gitorious.org/gnutls/gnutls/commit/328ee22c1b3951e060c7124c7cb1cee592c59bc0 x_refsource_CONFIRMExploitPatch
- https://gitorious.org/gnutls/gnutls/commit/b8391806cd79095fe566f2401d8c7ad85a64b198 x_refsource_CONFIRMExploitPatch
- https://nvd.nist.gov/vuln/detail/CVE-2013-1619
- https://www.cve.org/CVERecord?id=CVE-2013-1619
Change history (0)
No recorded changes yet.