Mageia 6: MGASA-2019-0103 Moderate: gnutls Padding Oracle Attack
mageia
March 7, 2019
A Bleichenbacher type side-channel based padding oracle attack was found in the way gnutls handles verification of RSA decrypted PKCS#1 v1.5 data
Summary
A Bleichenbacher type side-channel based padding oracle attack was found
in the way gnutls handles verification of RSA decrypted PKCS#1 v1.5 data.
An attacker who is able to run process on the same physical core as the
victim process, could use this to extract plaintext or in some cases
downgrade any TLS connections to a vulnerable server. (CVE-2018-16868)
References
- https://bugs.mageia.org/show_bug.cgi?id=24066
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/INZ7O52ANE3RPKUWDI3TKPVVHQNKHVKY/
- https://www.cve.org/CVERecord?id=CVE-2018-16868
Resolution
SRPMS
- 6/core/gnutls-3.5.13-1.2.mga6
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Publication date: 07 Mar 2019
URL: https://advisories.mageia.org/MGASA-2019-0103.html
Type: security
CVE: CVE-2018-16868
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!