Wind River Support Network

HomeDefectsLIN9-7371
Not to be fixed

LIN9-7371 : Security Advisory - gnutls - CVE-2018-10846

Created: Aug 30, 2018    Updated: Jan 10, 2021
Resolved Date: Jan 10, 2021
Found In Version: 9.0.0.17
Severity: Standard
Applicable for: Wind River Linux 9
Component/s: Userspace

Description

A cache-based side channel in GnuTLS implementation that leads to plain text recovery in cross-VM attack setting was found. An attacker could use a combination of Just in Time Prime+probe attack in combination with Lucky-13 attack to recover plain text using crafted packets.

https://nvd.nist.gov/vuln/detail/CVE-2018-10846

CVEs

  • Linkedin
  • Facebook
  • Twitter
  • Youtube