CVE:CVE-2023-0361
CNNVD:CNNVD-202302-884
GnuTLS是一款免费的用于实现SSL、TLS和DTLS协议的安全通信库。
GnuTLS存在安全漏洞，该漏洞源于可以通过网络恢复以RSA密文加密的密钥。攻击者利用该漏洞可以解密应用程序数据。
solution:Upgrade gnu gnutls to a higher version than 3.6.8-11.el8_2,and avoid the version 3.6.8-11.el8_2; Upgrade redhat enterprise_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0; Upgrade fedoraproject fedora to a higher version than 36,37,38,and avoid the version 36,37,38; Upgrade netapp active_iq_unified_manager to a higher version than -; Upgrade netapp converged_systems_advisor_agent to a higher version than -; Upgrade netapp ontap_select_deploy_administration_utility to a higher version than -