This report was translated by AI; nobody has reviewed the translation yet. Original language: Slovak.

[TLP:CLEAR] GnuTLS 3.8.4 fixes 2 vulnerabilities (Key disclosure + DoS)

GnuTLS - CVE-2024-28834 (Minerva, ECDSA timing side-channel)
CVSS 7.4 (High)

The vulnerability called Minerva exploits a timing side channel in ECDSA code when using the deterministic mode (GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE) [1], allowing degradation of the nonce size within a single transaction [2] and reconstruction of the private key after collecting up to a thousand signatures of known messages [3]. Impact: Information exposure Recommendations: Update to GnuTLS 3.8.4

The vulnerability is present in product:

  • GnuTLS;<3.8.4

CVSS: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

More information:

The vulnerability was publicly disclosed 21. 3. 2024.

GnuTLS - CVE-2024-28835 (crash on chain > 16)
CVSS 5.0 (Medium)

Denial of service when validating an X509 certificate chain longer than 16 [4]. More detailed technical information and a reproduction procedure are in the issue [5]. The bug was in the function gnutls_x509_trust_list_verify_crt2() and was fixed as part of the change [6]. Impact: Denial of service Recommendations: Update to GnuTLS 3.8.4

The vulnerability is present in product:

  • GnuTLS;<3.8.4

CVSS: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

More information:

The vulnerability was publicly disclosed 21. 3. 2024.

the GnuTLS cryptographic library was released on Wednesday 20.03.2024 in version 3.8.4, fixing two vulnerabilities - one allowing leakage of an ECDSA key under specific conditions and the other leading to a crash of the certtool tool and potentially other applications that use the library for certificate validation. Detailed release notes are in [7].

CESNET, z.s.p.o. on 25. 3. 2024.

CESNET, z.s.p.o. Logo