Vulnerability · Published Feb 15, 2023 · Assigned by redhat
CVE-2023-0361
High 7.4
In plain English
A high-severity security flaw in gnutls. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.5% (higher than 74% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. This side-channel can be sufficient to recover the key encrypted in the RSA ciphertext across a network in a Bleichenbacher style attack. To achieve a successful decryption the attacker would need to send a large amount of specially crafted messages to the vulnerable server. By recovering the secret from the ClientKeyExchange message, the attacker would be able to decrypt the application data exchanged over that connection.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | gnutls | 3.6.16-6.el8_7 | ALSA-2023:1569 |
| AlmaLinux:9 | gnutls | 3.7.6-18.el9_1 | ALSA-2023:1141 |
| AlmaLinux:8 | gnutls-c++ | 3.6.16-6.el8_7 | ALSA-2023:1569 |
| AlmaLinux:9 | gnutls-c++ | 3.7.6-18.el9_1 | ALSA-2023:1141 |
| AlmaLinux:8 | gnutls-dane | 3.6.16-6.el8_7 | ALSA-2023:1569 |
| AlmaLinux:9 | gnutls-dane | 3.7.6-18.el9_1 | ALSA-2023:1141 |
| AlmaLinux:8 | gnutls-devel | 3.6.16-6.el8_7 | ALSA-2023:1569 |
| AlmaLinux:9 | gnutls-devel | 3.7.6-18.el9_1 | ALSA-2023:1141 |
| AlmaLinux:8 | gnutls-utils | 3.6.16-6.el8_7 | ALSA-2023:1569 |
| AlmaLinux:9 | gnutls-utils | 3.7.6-18.el9_1 | ALSA-2023:1141 |
| Alpine:v3.20 | gnutls | 3.8.0-r0 | ALPINE-CVE-2023-0361 |
| Alpine:v3.21 | gnutls | 3.8.0-r0 | ALPINE-CVE-2023-0361 |
| Alpine:v3.22 | gnutls | 3.8.0-r0 | ALPINE-CVE-2023-0361 |
| Alpine:v3.23 | gnutls | 3.8.0-r0 | ALPINE-CVE-2023-0361 |
| Alpine:v3.24 | gnutls | 3.8.0-r0 | ALPINE-CVE-2023-0361 |
| Debian:12 | gnutls28 | 3.7.8-5 | DEBIAN-CVE-2023-0361 |
| Debian:13 | gnutls28 | 3.7.8-5 | DEBIAN-CVE-2023-0361 |
| Debian:14 | gnutls28 | 3.7.8-5 | DEBIAN-CVE-2023-0361 |
| Rocky Linux:8 | gnutls | 0:3.6.16-6.el8_7 | RLSA-2023:1569 |
| Rocky Linux:9 | gnutls | 0:3.7.6-18.el9_1 | RLSA-2023:1141 |
| Ubuntu:22.04:LTS | gnutls28 | 3.7.3-4ubuntu1.2 | USN-5901-1 |
| Ubuntu:22.04:LTS | gnutls28 | 3.7.3-4ubuntu1.2 | UBUNTU-CVE-2023-0361 |
Affected products (as reported)
Weakness: CWE-203 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
References
- https://access.redhat.com/security/cve/CVE-2023-0361
- https://github.com/tlsfuzzer/tlsfuzzer/pull/679
- https://gitlab.com/gnutls/gnutls/-/issues/1050
- [debian-lts-announce] 20230218 [SECURITY] [DLA 3321-1] gnutls28 security update mailing-list
- FEDORA-2023-1c4a6a47ae vendor-advisory
- FEDORA-2023-5b378b82b3 vendor-advisory
- FEDORA-2023-4fc4c33f2b vendor-advisory
- https://security.netapp.com/advisory/ntap-20230324-0005/
- https://security.netapp.com/advisory/ntap-20230725-0005/
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
- https://cert-portal.siemens.com/productcert/html/ssa-806742.html