USN-4384-1: GnuTLS vulnerability
It was discovered that GnuTLS incorrectly handled session ticket encryption keys. A remote attacker could possibly use this issue to bypass authentication or recover sensitive information.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/libgnutls30to a version that resolves this vulnerability.Fixed in 3.6.13-2ubuntu1.1 - Upgrade
Upgrade
ubuntu/libgnutls30to a version that resolves this vulnerability.Fixed in 3.6.9-5ubuntu1.2
Event History
Frequently Asked Questions
What is the vulnerability ID for this GnuTLS vulnerability?
The vulnerability ID for this GnuTLS vulnerability is CVE-2020-13777.
What is the severity of USN-4384-1 GnuTLS vulnerability?
The severity of USN-4384-1 GnuTLS vulnerability is not specified.
How does this GnuTLS vulnerability impact users?
This GnuTLS vulnerability could allow a remote attacker to bypass authentication or recover sensitive information.
Which software versions are affected by this GnuTLS vulnerability?
The following versions of libgnutls30 are affected: 3.6.13-2ubuntu1.1 and 3.6.9-5ubuntu1.2.
How can I fix the USN-4384-1 GnuTLS vulnerability?
To fix the USN-4384-1 GnuTLS vulnerability, update to version 3.6.13-2ubuntu1.1 if on Ubuntu 20.04, or update to version 3.6.9-5ubuntu1.2 if on Ubuntu 19.10.