Vulnerabilities > CVE-2024-0553 - Information Exposure Through Discrepancy vulnerability in multiple products

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

low complexity

NVD

Published: 2024-01-16

Updated: 2024-09-16

Summary

A vulnerability was found in GnuTLS. The response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from the response times of ciphertexts with correct PKCS#1 v1.5 padding. This issue may allow a remote attacker to perform a timing side-channel attack in the RSA-PSK key exchange, potentially leading to the leakage of sensitive data. CVE-2024-0553 is designated as an incomplete resolution for CVE-2023-5981.

Vulnerable Configurations

Part	Description	Count
Application	Gnu GNU Gnutls - GNU Gnutls 1.0.16 GNU Gnutls 1.0.17 GNU Gnutls 1.0.18 GNU Gnutls 1.0.19 GNU Gnutls 1.0.20 GNU Gnutls 1.0.21 GNU Gnutls 1.0.22 GNU Gnutls 1.0.23 GNU Gnutls 1.0.24 GNU Gnutls 1.0.25 GNU Gnutls 1.1.13 GNU Gnutls 1.1.14 GNU Gnutls 1.1.15 GNU Gnutls 1.1.16 GNU Gnutls 1.1.17 GNU Gnutls 1.1.18 GNU Gnutls 1.1.19 GNU Gnutls 1.1.20 GNU Gnutls 1.1.21 GNU Gnutls 1.1.22 GNU Gnutls 1.1.23 GNU Gnutls 1.2.0 GNU Gnutls 1.2.1 GNU Gnutls 1.2.2 GNU Gnutls 1.2.3 GNU Gnutls 1.2.4 GNU Gnutls 1.2.5 GNU Gnutls 1.2.6 GNU Gnutls 1.2.7 GNU Gnutls 1.2.8 GNU Gnutls 1.2.8.1A1 GNU Gnutls 1.2.9 GNU Gnutls 1.2.10 GNU Gnutls 1.2.11 GNU Gnutls 1.3.0 GNU Gnutls 1.3.1 GNU Gnutls 1.3.2 GNU Gnutls 1.3.3 GNU Gnutls 1.3.4 GNU Gnutls 1.3.5 GNU Gnutls 1.4.0 GNU Gnutls 1.4.1 GNU Gnutls 1.4.2 GNU Gnutls 1.4.3 GNU Gnutls 1.4.4 GNU Gnutls 1.4.5 GNU Gnutls 1.5.0 GNU Gnutls 1.5.1 GNU Gnutls 1.5.2 GNU Gnutls 1.5.3 GNU Gnutls 1.5.4 GNU Gnutls 1.5.5 GNU Gnutls 1.6.0 GNU Gnutls 1.6.1 GNU Gnutls 1.6.2 GNU Gnutls 1.6.3 GNU Gnutls 1.7.0 GNU Gnutls 1.7.1 GNU Gnutls 1.7.2 GNU Gnutls 1.7.3 GNU Gnutls 1.7.4 GNU Gnutls 1.7.5 GNU Gnutls 1.7.6 GNU Gnutls 1.7.7 GNU Gnutls 1.7.8 GNU Gnutls 1.7.9 GNU Gnutls 1.7.10 GNU Gnutls 1.7.11 GNU Gnutls 1.7.12 GNU Gnutls 1.7.13 GNU Gnutls 1.7.14 GNU Gnutls 1.7.15 GNU Gnutls 1.7.16 GNU Gnutls 1.7.17 GNU Gnutls 1.7.18 GNU Gnutls 1.7.19 GNU Gnutls 2.0.0 GNU Gnutls 2.0.1 GNU Gnutls 2.0.2 GNU Gnutls 2.0.3 GNU Gnutls 2.0.4 GNU Gnutls 2.1.0 GNU Gnutls 2.1.1 GNU Gnutls 2.1.2 GNU Gnutls 2.1.3 GNU Gnutls 2.1.4 GNU Gnutls 2.1.5 GNU Gnutls 2.1.6 GNU Gnutls 2.1.7 GNU Gnutls 2.1.8 GNU Gnutls 2.2.0 GNU Gnutls 2.2.1 GNU Gnutls 2.2.2 GNU Gnutls 2.2.3 GNU Gnutls 2.2.4 GNU Gnutls 2.2.5 GNU Gnutls 2.3.0 GNU Gnutls 2.3.1 GNU Gnutls 2.3.2 GNU Gnutls 2.3.3 GNU Gnutls 2.3.4 GNU Gnutls 2.3.5 GNU Gnutls 2.3.6 GNU Gnutls 2.3.7 GNU Gnutls 2.3.8 GNU Gnutls 2.3.9 GNU Gnutls 2.3.10 GNU Gnutls 2.3.11 GNU Gnutls 2.4.0 GNU Gnutls 2.4.1 GNU Gnutls 2.4.2 GNU Gnutls 2.4.3 GNU Gnutls 2.5.0 GNU Gnutls 2.6.0 GNU Gnutls 2.6.1 GNU Gnutls 2.6.2 GNU Gnutls 2.6.3 GNU Gnutls 2.6.4 GNU Gnutls 2.6.5 GNU Gnutls 2.6.6 GNU Gnutls 2.7.0 GNU Gnutls 2.7.1 GNU Gnutls 2.7.2 GNU Gnutls 2.7.3 GNU Gnutls 2.7.4 GNU Gnutls 2.7.5 GNU Gnutls 2.7.6 GNU Gnutls 2.8.0 GNU Gnutls 2.8.1 GNU Gnutls 2.8.2 GNU Gnutls 2.8.3 GNU Gnutls 2.8.4 GNU Gnutls 2.8.5 GNU Gnutls 2.8.6 GNU Gnutls 2.10.0 GNU Gnutls 2.10.1 GNU Gnutls 2.10.2 GNU Gnutls 2.10.3 GNU Gnutls 2.10.4 GNU Gnutls 2.10.5 GNU Gnutls 2.12.0 GNU Gnutls 2.12.1 GNU Gnutls 2.12.2 GNU Gnutls 2.12.3 GNU Gnutls 2.12.4 GNU Gnutls 2.12.5 GNU Gnutls 2.12.6 GNU Gnutls 2.12.6.1 GNU Gnutls 2.12.7 GNU Gnutls 2.12.8 GNU Gnutls 2.12.9 GNU Gnutls 2.12.10 GNU Gnutls 2.12.11 GNU Gnutls 2.12.12 GNU Gnutls 2.12.13 GNU Gnutls 2.12.14 GNU Gnutls 2.12.15 GNU Gnutls 2.12.16 GNU Gnutls 2.12.17 GNU Gnutls 2.12.18 GNU Gnutls 2.12.19 GNU Gnutls 2.12.20 GNU Gnutls 2.12.21 GNU Gnutls 2.12.22 GNU Gnutls 2.12.23 GNU Gnutls 2.12.24 GNU Gnutls 3.0 GNU Gnutls 3.0.0 GNU Gnutls 3.0.1 GNU Gnutls 3.0.2 GNU Gnutls 3.0.3 GNU Gnutls 3.0.4 GNU Gnutls 3.0.5 GNU Gnutls 3.0.6 GNU Gnutls 3.0.7 GNU Gnutls 3.0.8 GNU Gnutls 3.0.9 GNU Gnutls 3.0.10 GNU Gnutls 3.0.11 GNU Gnutls 3.0.12 GNU Gnutls 3.0.13 GNU Gnutls 3.0.14 GNU Gnutls 3.0.15 GNU Gnutls 3.0.16 GNU Gnutls 3.0.17 GNU Gnutls 3.0.18 GNU Gnutls 3.0.19 GNU Gnutls 3.0.20 GNU Gnutls 3.0.21 GNU Gnutls 3.0.22 GNU Gnutls 3.0.23 GNU Gnutls 3.0.24 GNU Gnutls 3.0.25 GNU Gnutls 3.0.26 GNU Gnutls 3.0.27 GNU Gnutls 3.0.28 GNU Gnutls 3.0.29 GNU Gnutls 3.0.30 GNU Gnutls 3.0.31 GNU Gnutls 3.0.32 GNU Gnutls 3.1.0 GNU Gnutls 3.1.1 GNU Gnutls 3.1.2 GNU Gnutls 3.1.3 GNU Gnutls 3.1.4 GNU Gnutls 3.1.5 GNU Gnutls 3.1.6 GNU Gnutls 3.1.7 GNU Gnutls 3.1.8 GNU Gnutls 3.1.9 GNU Gnutls 3.1.10 GNU Gnutls 3.1.11 GNU Gnutls 3.1.12 GNU Gnutls 3.1.13 GNU Gnutls 3.1.14 GNU Gnutls 3.1.15 GNU Gnutls 3.1.16 GNU Gnutls 3.1.17 GNU Gnutls 3.1.18 GNU Gnutls 3.1.19 GNU Gnutls 3.1.20 GNU Gnutls 3.1.21 GNU Gnutls 3.1.22 GNU Gnutls 3.1.23 GNU Gnutls 3.1.24 GNU Gnutls 3.1.25 GNU Gnutls 3.1.26 GNU Gnutls 3.1.27 GNU Gnutls 3.1.28 GNU Gnutls 3.2.0 GNU Gnutls 3.2.1 GNU Gnutls 3.2.2 GNU Gnutls 3.2.3 GNU Gnutls 3.2.4 GNU Gnutls 3.2.5 GNU Gnutls 3.2.6 GNU Gnutls 3.2.7 GNU Gnutls 3.2.8 GNU Gnutls 3.2.8.1 GNU Gnutls 3.2.9 GNU Gnutls 3.2.10 GNU Gnutls 3.2.11 GNU Gnutls 3.2.12 GNU Gnutls 3.2.12.1 GNU Gnutls 3.2.13 GNU Gnutls 3.2.14 GNU Gnutls 3.2.15 GNU Gnutls 3.2.16 GNU Gnutls 3.2.17 GNU Gnutls 3.2.18 GNU Gnutls 3.2.19 GNU Gnutls 3.2.20 GNU Gnutls 3.2.21 GNU Gnutls 3.3.0 GNU Gnutls 3.3.1 GNU Gnutls 3.3.2 GNU Gnutls 3.3.3 GNU Gnutls 3.3.4 GNU Gnutls 3.3.5 GNU Gnutls 3.3.6 GNU Gnutls 3.3.7 GNU Gnutls 3.3.8 GNU Gnutls 3.3.9 GNU Gnutls 3.3.10 GNU Gnutls 3.3.11 GNU Gnutls 3.3.12 GNU Gnutls 3.3.13 GNU Gnutls 3.3.14 GNU Gnutls 3.3.15 GNU Gnutls 3.3.16 GNU Gnutls 3.3.17 GNU Gnutls 3.3.18 GNU Gnutls 3.3.19 GNU Gnutls 3.3.20 GNU Gnutls 3.3.21 GNU Gnutls 3.3.22 GNU Gnutls 3.3.23 GNU Gnutls 3.3.24 GNU Gnutls 3.3.25 GNU Gnutls 3.3.26 GNU Gnutls 3.3.27 GNU Gnutls 3.3.28 GNU Gnutls 3.3.29 GNU Gnutls 3.3.30 GNU Gnutls 3.4.0 GNU Gnutls 3.4.1 GNU Gnutls 3.4.2 GNU Gnutls 3.4.3 GNU Gnutls 3.4.4 GNU Gnutls 3.4.4.1 GNU Gnutls 3.4.5 GNU Gnutls 3.4.6 GNU Gnutls 3.4.7 GNU Gnutls 3.4.8 GNU Gnutls 3.4.9 GNU Gnutls 3.4.10 GNU Gnutls 3.4.11 GNU Gnutls 3.4.12 GNU Gnutls 3.4.13 GNU Gnutls 3.4.14 GNU Gnutls 3.4.15 GNU Gnutls 3.4.16 GNU Gnutls 3.4.17 GNU Gnutls 3.5.0 GNU Gnutls 3.5.1 GNU Gnutls 3.5.2 GNU Gnutls 3.5.3 GNU Gnutls 3.5.4 GNU Gnutls 3.5.5 GNU Gnutls 3.5.6 GNU Gnutls 3.5.7 GNU Gnutls 3.5.8 GNU Gnutls 3.5.9 GNU Gnutls 3.5.10 GNU Gnutls 3.5.11 GNU Gnutls 3.5.12 GNU Gnutls 3.5.13 GNU Gnutls 3.5.14 GNU Gnutls 3.5.15 GNU Gnutls 3.5.16 GNU Gnutls 3.5.17 GNU Gnutls 3.5.18 GNU Gnutls 3.5.19 GNU Gnutls 3.6.0 GNU Gnutls 3.6.1 GNU Gnutls 3.6.2 GNU Gnutls 3.6.3 GNU Gnutls 3.6.4 GNU Gnutls 3.6.5 GNU Gnutls 3.6.6 GNU Gnutls 3.6.7 GNU Gnutls 3.6.8 GNU Gnutls 3.6.8-11.El8_2 GNU Gnutls 3.6.9 GNU Gnutls 3.6.10 GNU Gnutls 3.6.11 GNU Gnutls 3.6.12 GNU Gnutls 3.6.13 GNU Gnutls 3.6.14 GNU Gnutls 3.6.15 GNU Gnutls 3.6.16 GNU Gnutls 3.7.0 GNU Gnutls 3.7.1 GNU Gnutls 3.7.2 GNU Gnutls 3.7.3 GNU Gnutls 3.7.4 GNU Gnutls 3.7.5 GNU Gnutls 3.7.6 GNU Gnutls 3.7.7 GNU Gnutls 3.7.8 GNU Gnutls 3.7.9 GNU Gnutls 3.7.10 GNU Gnutls 3.8.0 GNU Gnutls 3.8.1 GNU Gnutls 3.8.2	357
OS	Fedoraproject Fedoraproject Fedora 39	1
OS	Redhat Redhat Enterprise Linux 8.0 Redhat Enterprise Linux 9.0	2

Common Weakness Enumeration (CWE)

CWE-203 - Information Exposure Through Discrepancy

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References