CVE-2020-13777
Published: 04 June 2020
GnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of confidentiality in TLS 1.2, and an authentication bypass in TLS 1.3). The earliest affected version is 3.6.4 (2018-09-24) because of an error in a 2018-09-18 commit. Until the first key rotation, the TLS server always uses wrong data in place of an encryption key derived from an application.
Priority
High
CVSS 3 base score: 7.4
Status
| Package | Release | Status |
|---|---|---|
|
gnutls28 Launchpad, Ubuntu, Debian |
Upstream |
Released
(3.6.14)
|
| Ubuntu 20.04 LTS (Focal Fossa) |
Released
(3.6.13-2ubuntu1.1)
|
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Not vulnerable
(code not present)
|
|
| Ubuntu 16.04 ESM (Xenial Xerus) |
Not vulnerable
(code not present)
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
|
|
|
Patches: Upstream: https://gitlab.com/gnutls/gnutls/-/commit/c2646aeee94e71cb15c90a3147cf3b5b0ca158ca Upstream: https://gitlab.com/gnutls/gnutls/-/commit/3d7fae761e65e9d0f16d7247ee8a464d4fe002da |
||
Notes
| Author | Note |
|---|---|
| mdeslaur | introduced in 3.6.4 |
References
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13777
- https://gnutls.org/security-new.html#GNUTLS-SA-2020-06-03
- https://ubuntu.com/security/notices/USN-4384-1
- NVD
- Launchpad
- Debian