NetSight
IP …
medium5.9

CVE-2018-10845

It was found that the GnuTLS implementation of HMAC-SHA-384 was vulnerable to a Lucky thirteen style attack.

Impact

It was found that the GnuTLS implementation of HMAC-SHA-384 was vulnerable to a Lucky thirteen style attack. Remote attackers could use this flaw to conduct distinguishing attacks and plain text recovery attacks via statistical analysis of timing data using crafted packets.

Affected products

VendorProductAffected versions
GnuGnutls
before 3.6.12
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Server
Version 7.0
RedhatEnterprise Linux Workstation
Version 7.0
CanonicalUbuntu Linux
Versions 16.04, 18.04, 18.10, 19.04
FedoraprojectFedora
Versions 31, 32
DebianDebian Linux
Version 8.0

Weakness classification

CWE-385CWE-327

References