CVE-2024-0553

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-0553
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-0553.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-0553
Downstream
ALPINE (1)
AZL (2)
BELL (1)
CLSA (6)
DEBIAN (1)
JLSEC (1)
MGASA (1)
OESA (6)
openSUSE (1)
RHSA (5)
RLSA (1)
SUSE (4)
UBUNTU (1)
Related
ALSA (2)
openSUSE (1)
SUSE (4)
Published
2024-01-16T11:40:50Z
Modified
2026-10-22T02:47:36Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
Gnutls: incomplete fix for cve-2023-5981
Details

A vulnerability was found in GnuTLS. The response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from the response times of ciphertexts with correct PKCS#1 v1.5 padding. This issue may allow a remote attacker to perform a timing side-channel attack in the RSA-PSK key exchange, potentially leading to the leakage of sensitive data. CVE-2024-0553 is designated as an incomplete resolution for CVE-2023-5981.

Database specific 
{
    "cna_assigner":  "redhat",
    "cwe_ids":  [
        "CWE-203"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/0xxx/CVE-2024-0553.json",
    "unresolved_ranges":  [
        {
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "fixed":  "0:3.6.16-8.el8_9.1"
                        },
                        {
                            "fixed":  "0:3.6.16-8.el8_9.1"
                        },
                        {
                            "fixed":  "0:3.6.16-5.el8_6.3"
                        },
                        {
                            "fixed":  "0:3.6.16-7.el8_8.2"
                        },
                        {
                            "fixed":  "0:3.7.6-23.el9_3.3"
                        },
                        {
                            "fixed":  "0:3.7.6-23.el9_3.3"
                        },
                        {
                            "fixed":  "0:3.7.6-21.el9_2.2"
                        },
                        {
                            "fixed":  "v4.15.0-37"
                        },
                        {
                            "fixed":  "v4.15.0-68"
                        },
                        {
                            "fixed":  "v4.15.0-158"
                        },
                        {
                            "fixed":  "v4.15.0-39"
                        },
                        {
                            "fixed":  "v4.15.0-58"
                        },
                        {
                            "fixed":  "v4.15.0-158"
                        },
                        {
                            "fixed":  "v4.15.0-13"
                        },
                        {
                            "fixed":  "v4.15.0-81"
                        },
                        {
                            "fixed":  "v4.15.0-158"
                        },
                        {
                            "fixed":  "v4.15.0-79"
                        },
                        {
                            "fixed":  "v4.15.0-22"
                        },
                        {
                            "fixed":  "v4.15.0-57"
                        },
                        {
                            "fixed":  "v4.15.0-6"
                        },
                        {
                            "fixed":  "v4.15.0-158"
                        },
                        {
                            "fixed":  "v4.15.0-15"
                        },
                        {
                            "fixed":  "v4.15.0-15"
                        },
                        {
                            "fixed":  "v4.15.0-54"
                        },
                        {
                            "fixed":  "v4.15.0-158"
                        },
                        {
                            "fixed":  "v4.15.0-10"
                        },
                        {
                            "fixed":  "v4.15.0-26"
                        },
                        {
                            "fixed":  "v4.15.0-158"
                        },
                        {
                            "fixed":  "v4.15.0-19"
                        },
                        {
                            "fixed":  "v4.15.0-158"
                        },
                        {
                            "fixed":  "v4.15.0-158"
                        },
                        {
                            "fixed":  "v4.15.0-21"
                        },
                        {
                            "fixed":  "v4.15.0-103"
                        },
                        {
                            "fixed":  "v5.8.6-22"
                        },
                        {
                            "fixed":  "v5.8.6-11"
                        },
                        {
                            "fixed":  "v6.8.1-407"
                        },
                        {
                            "fixed":  "v5.8.6-19"
                        },
                        {
                            "fixed":  "v1.0.0-479"
                        },
                        {
                            "fixed":  "v5.8.6-7"
                        },
                        {
                            "fixed":  "v0.4.0-247"
                        },
                        {
                            "fixed":  "v5.8.6-5"
                        },
                        {
                            "fixed":  "v1.1.0-227"
                        },
                        {
                            "fixed":  "v5.8.1-470"
                        },
                        {
                            "fixed":  "v2.9.6-14"
                        },
                        {
                            "fixed":  "v5.8.6-2"
                        },
                        {
                            "fixed":  "v5.8.6-24"
                        },
                        {
                            "fixed":  "v5.8.6-10"
                        },
                        {
                            "fixed":  "v0.1.0-525"
                        },
                        {
                            "fixed":  "v0.1.0-224"
                        },
                        {
                            "fixed":  "v0.28.1-56"
                        }
                    ],
                    "source":  "AFFECTED_FIELD",
                    "strategy":  "InverseAffectedRanges"
                }
            ]
        }
    ]
}
References

Affected packages

Git / gitlab.com/gnutls/gnutls

Affected ranges

Type
GIT
Repo
https://gitlab.com/gnutls/gnutls
Events
Introduced
df405c5e64874529b7b9dc1177165f03971dc196
Fixed
2f04c14daa086889b4e85f7056c39d23766ddaa1
Database specific
Show details 
{
    "extracted_events":  [
        {
            "range":  [
                {
                    "introduced":  "3.8.0"
                },
                {
                    "fixed":  "3.8.3"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandardRange"
        },
        {
            "cpe":  "cpe:2.3:a:gnu:gnutls:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "fixed":  "3.8.3"
                }
            ],
            "source":  "CPE_RANGE"
        }
    ]
}

Affected versions

3.*
3.8.0
3.8.1
3.8.2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-0553.json"