Wind River Support Network

HomeDefectsLIN1018-3200
Fixed

LIN1018-3200 : Security Advisory - gnutls - CVE-2018-16868

Created: Dec 19, 2018    Updated: Feb 2, 2019
Resolved Date: Dec 25, 2018
Found In Version: unknown
Fix Version: 10.18.44.3
Severity: Standard
Applicable for: Wind River Linux LTS 18
Component/s: Userspace

Description

A Bleichenbacher type side-channel based padding oracle attack was found in the way gnutls handles verification of RSA decrypted PKCS#1 v1.5 data. An attacker who is able to run process on the same physical core as the victim process, could use this to extract plaintext or in some cases downgrade any TLS connections to a vulnerable server.

https://nvd.nist.gov/vuln/detail/CVE-2018-16868

CVEs


Live chat
Online