Description
GnuTLS 3.6.x before 3.6.13 uses incorrect cryptography for DTLS. The earliest affected version is 3.6.3 (2018-07-16) because of an error in a 2017-10-06 commit. The DTLS client always uses 32 '\0' bytes instead of a random value, and thus contributes no randomness to a DTLS negotiation. This breaks the security guarantees of the DTLS protocol.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
None
Affected products
- Canonical / Ubuntu Linux19.10 – 19.10
- Debian / debian_linux10.0 – 10.0
- fedoraproject / fedora31 – 31
- fedoraproject / fedora32 – 32
- gnu / gnutls3.6.3 – 3.6.13
- openSUSE / Leap15.1 – 15.1
References
- MISChttps://security.gentoo.org/glsa/202004-06
- MISChttps://gitlab.com/gnutls/gnutls/-/issues/960
- MISChttps://gitlab.com/gnutls/gnutls/-/commit/5b595e8e52653f6c5726a4cdd8fddeb6e83804d2
- MISChttps://www.gnutls.org/security-new.html#GNUTLS-SA-2020-03-31
- VENDOR_ADVISORYhttps://www.debian.org/security/2020/dsa-4652
- MAILING_LISThttp://lists.opensuse.org/opensuse-security-announce/2020-04/msg00015.html
- MISChttps://security.netapp.com/advisory/ntap-20200416-0002/
- VENDOR_ADVISORYhttps://usn.ubuntu.com/4322-1/
- MAILING_LISThttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WDYY3R4F5CUTFAMXH2C5NKYFVDEJLTT7/
- MAILING_LISThttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ILMOWPKMTZAIMK5F32TUMO34XCABUCFJ/
Updated 45m ago · 8 sources