Home

CVE-2018-10846

Description

A cache-based side channel in GnuTLS implementation that leads to plain text recovery in cross-VM attack setting was found. An attacker could use a combination of Just in Time Prime+probe attack in combination with Lucky-13 attack to recover plain text using crafted packets.

Risk Information

Base Score
5.6
MODERATE
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
EPSS Score
Exploitation Probability
0.014

Associated Vulnerability

VulnerabilityOS Platform
GNU TLS library (USN-3999-1) libgnutls30_3.6.4-2ubuntu1.2_i386.debLinux
GNU TLS library (USN-3999-1) libgnutls30_3.6.4-2ubuntu1.2_amd64.debLinux
GNU TLS library (USN-3999-1) libgnutls30_3.6.5-2ubuntu1.1_i386.debLinux
GNU TLS library (USN-3999-1) libgnutls30_3.6.5-2ubuntu1.1_amd64.debLinux
GNU TLS library (USN-3999-1) libgnutls30_3.4.10-4ubuntu1.5_i386.debLinux
GNU TLS library (USN-3999-1) libgnutls30_3.4.10-4ubuntu1.5_amd64.debLinux
GNU TLS library (USN-3999-1) libgnutls30_3.5.18-1ubuntu1.1_i386.debLinux
GNU TLS library (USN-3999-1) libgnutls30_3.5.18-1ubuntu1.1_amd64.debLinux
SUSE-SU-2018:2842-1(SUSE Linux Enterprise Desktop 12-SP3 ) gnutls-3.3.27-3.3.1.x86_64.rpmLinux
SUSE-SU-2018:2842-1(SUSE Linux Enterprise Desktop 12-SP3 ) gnutls-debuginfo-3.3.27-3.3.1.x86_64.rpmLinux
SUSE-SU-2018:2842-1(SUSE Linux Enterprise Desktop 12-SP3 ) gnutls-debugsource-3.3.27-3.3.1.x86_64.rpmLinux
SUSE-SU-2018:2842-1(SUSE Linux Enterprise Server 12-SP3 ) libgnutls-openssl27-3.3.27-3.3.1.x86_64.rpmLinux
SUSE-SU-2018:2842-1(SUSE Linux Enterprise Server 12-SP3 ) libgnutls-openssl27-debuginfo-3.3.27-3.3.1.x86_64.rpmLinux
SUSE-SU-2018:2842-1(SUSE Linux Enterprise Desktop 12-SP3 ) libgnutls28-3.3.27-3.3.1.x86_64.rpmLinux
SUSE-SU-2018:2842-1(SUSE Linux Enterprise Desktop 12-SP3 ) libgnutls28-32bit-3.3.27-3.3.1.x86_64.rpmLinux
SUSE-SU-2018:2842-1(SUSE Linux Enterprise Desktop 12-SP3 ) libgnutls28-debuginfo-3.3.27-3.3.1.x86_64.rpmLinux
SUSE-SU-2018:2842-1(SUSE Linux Enterprise Desktop 12-SP3 ) libgnutls28-debuginfo-32bit-3.3.27-3.3.1.x86_64.rpmLinux
(RHSA-2018:3050) gnutls security, bug fix, and enhancement update gnutls-3.3.29-8.el7.i686.rpmLinux
(RHSA-2018:3050) gnutls security, bug fix, and enhancement update gnutls-3.3.29-8.el7.x86_64.rpmLinux
(RHSA-2018:3050) gnutls security, bug fix, and enhancement update gnutls-c++-3.3.29-8.el7.i686.rpmLinux
(RHSA-2018:3050) gnutls security, bug fix, and enhancement update gnutls-c++-3.3.29-8.el7.x86_64.rpmLinux
(RHSA-2018:3050) gnutls security, bug fix, and enhancement update gnutls-dane-3.3.29-8.el7.i686.rpmLinux
(RHSA-2018:3050) gnutls security, bug fix, and enhancement update gnutls-dane-3.3.29-8.el7.x86_64.rpmLinux
(RHSA-2018:3050) gnutls security, bug fix, and enhancement update gnutls-devel-3.3.29-8.el7.i686.rpmLinux
(RHSA-2018:3050) gnutls security, bug fix, and enhancement update gnutls-devel-3.3.29-8.el7.x86_64.rpmLinux
(RHSA-2018:3050) gnutls security, bug fix, and enhancement update gnutls-utils-3.3.29-8.el7.x86_64.rpmLinux
Gnutls update (ELSA-2018-3050) gnutls-3.3.29-8.0.1.el7.x86_64.rpmLinux
Gnutls-c++ update (ELSA-2018-3050) gnutls-c++-3.3.29-8.0.1.el7.x86_64.rpmLinux
Gnutls-dane update (ELSA-2018-3050) gnutls-dane-3.3.29-8.0.1.el7.x86_64.rpmLinux
Gnutls-devel update (ELSA-2018-3050) gnutls-devel-3.3.29-8.0.1.el7.x86_64.rpmLinux
Gnutls-utils update (ELSA-2018-3050) gnutls-utils-3.3.29-8.0.1.el7.x86_64.rpmLinux
Gnutls update (ELSA-2018-3050) gnutls-3.3.29-8.0.1.el7.i686.rpmLinux
Gnutls-c++ update (ELSA-2018-3050) gnutls-c++-3.3.29-8.0.1.el7.i686.rpmLinux
Gnutls-dane update (ELSA-2018-3050) gnutls-dane-3.3.29-8.0.1.el7.i686.rpmLinux
Gnutls-devel update (ELSA-2018-3050) gnutls-devel-3.3.29-8.0.1.el7.i686.rpmLinux
(RHSA-2018:3050)Moderate: security, bug fix, and enhancement update gnutls-debuginfo-3.3.29-8.el7.i686.rpmLinux
(RHSA-2018:3050)Moderate: security, bug fix, and enhancement update gnutls-debuginfo-3.3.29-8.el7.x86_64.rpmLinux
gnutls Security Update (ALAS-2018-1120) gnutls-3.3.29-8.amzn2.i686.rpmLinux
gnutls Security Update (ALAS-2018-1120) gnutls-3.3.29-8.amzn2.x86_64.rpmLinux
gnutls Security Update (ALAS-2018-1120) gnutls-c++-3.3.29-8.amzn2.i686.rpmLinux
gnutls Security Update (ALAS-2018-1120) gnutls-c++-3.3.29-8.amzn2.x86_64.rpmLinux
gnutls Security Update (ALAS-2018-1120) gnutls-dane-3.3.29-8.amzn2.i686.rpmLinux
gnutls Security Update (ALAS-2018-1120) gnutls-dane-3.3.29-8.amzn2.x86_64.rpmLinux
gnutls Security Update (ALAS-2018-1120) gnutls-devel-3.3.29-8.amzn2.i686.rpmLinux
gnutls Security Update (ALAS-2018-1120) gnutls-devel-3.3.29-8.amzn2.x86_64.rpmLinux
gnutls Security Update (ALAS-2018-1120) gnutls-utils-3.3.29-8.amzn2.x86_64.rpmLinux
CVE-2018-10846NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234