DEBIAN-CVE-2018-10845

DEBIAN-CVE-2018-10845 PUBLISHED CVSS 5.900000095367432 MEDIUM

It was found that the GnuTLS implementation of HMAC-SHA-384 was vulnerable to a Lucky thirteen style attack. Remote attackers could use this flaw to conduct distinguishing attacks and plain text recovery attacks via statistical analysis of timing data using crafted packets.

Risk Scores

CVSS v3.1

5.900000095367432

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected Products

Vendor	Product	Versions
Debian:12	gnutls28	0, 0, 0
Debian:11	gnutls28	0, 0, 0
Debian:14	gnutls28	0, 0, 0
Debian:13	gnutls28	0, 0, 0

Timeline

Aug 22, 2018 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2018-10845 advisory

Open in Interactive Console →