CVE:CVE-2020-11501
CNNVD:CNNVD-202004-117
GnuTLS是一款免费的用于实现SSL、TLS和DTLS协议的安全通信库。
GnuTLS 3.6.13之前的3.6.x版本中存在加密问题漏洞。攻击者可利用该漏洞绕过DTLS协议的安全保护。
solution:Upgrade gnu gnutls to a higher version than 3.6.13,and avoid the version [3.6.3,3.6.13); Upgrade canonical ubuntu_linux to a higher version than 19.10,and avoid the version 19.10; Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0; Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1; Upgrade fedoraproject fedora to a higher version than 31,32,and avoid the version 31,32