USN-2821-1
gnutls26 vulnerability
No scoreFix available
It was discovered that GnuTLS incorrectly validated the first byte of padding in CBC modes. A remote attacker could possibly use this issue to perform a padding oracle attack.
What each source reports
OSV No score
gnutls26 vulnerability
It was discovered that GnuTLS incorrectly validated the first byte of padding in CBC modes. A remote attacker could possibly use this issue to perform a padding oracle attack.
- Record
USN-2821-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
gnutls26Ubuntu:14.04:LTS |
before 2.12.23-12ubuntu2.3, plus listed versions 2.12.23-1ubuntu42.12.23-1ubuntu52.12.23-12ubuntu12.12.23-12ubuntu22.12.23-12ubuntu2.12.12.23-12ubuntu2.2 |
2.12.23-12ubuntu2.3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-2821-1 is a vulnerability with no CVSS score yet in gnutls26, published November 30, 2015. No source lists public exploit code. Fixed in gnutls26 2.12.23-12ubuntu2.3.