CVE:CVE-2018-10844
CNNVD:CNNVD-201808-752
GnuTLS是一款免费的用于实现SSL、TLS和DTLS协议的安全通信库。GnuTLS implementation是一个SSL、TLS和DTLS协议的安全通信库的实现。
GnuTLS implementation存在加密问题漏洞。攻击者利用该漏洞通过使用特制的数据包对时序数据进行区分攻击和明文恢复攻击。
solution:Upgrade gnu gnutls to a higher version than 3.6.12,and avoid the version (,3.6.12); Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0; Upgrade canonical ubuntu_linux to a higher version than 16.04,18.04,18.10,19.04,and avoid the version 16.04,18.04,18.10,19.04; Upgrade fedoraproject fedora to a higher version than 31,32,and avoid the version 31,32; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0