CVE:CVE-2018-10846
CNNVD:CNNVD-201808-750
GnuTLS是一款免费的用于实现SSL、TLS和DTLS协议的安全通信库。GnuTLS implementation是一个SSL、TLS和DTLS协议的安全通信库的实现。
GnuTLS implementation存在加密问题漏洞。攻击者利用该漏洞通过使用特制的数据包恢复纯文本。
solution:Upgrade gnu gnutls to a higher version than 3.6.12,and avoid the version (,3.6.12); Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0; Upgrade canonical ubuntu_linux to a higher version than 16.04,18.04,18.10,19.04,and avoid the version 16.04,18.04,18.10,19.04; Upgrade fedoraproject fedora to a higher version than 31,32,and avoid the version 31,32; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0