{"id":"CVE-2018-10844","aliases":["DEBIAN-CVE-2018-10844","DLA-1560-1","EUVD-2018-2913","GHSA-9779-jfg9-frm3","MGASA-2018-0435","RHSA-2018:3050","SUSE-SU-2018:2825-1","SUSE-SU-2018:2825-2","SUSE-SU-2018:2842-1","SUSE-SU-2018:2930-1","UBUNTU-CVE-2018-10844","USN-3999-1"],"status":"published","title":"It was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky thirteen...","description":"It was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky thirteen style attack. Remote attackers could use this flaw to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data using crafted packets.","severity":{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.03606,"percentile":0.89551,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-327","CWE-385"],"published":"2018-08-22T00:00:00Z","modified":"2026-10-24T10:30:32Z","fixes":[{"ecosystem":"Debian:12","package":"gnutls28","fixed_in":["3.5.19-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"gnutls28","fixed_in":["3.5.19-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"gnutls28","fixed_in":["3.5.19-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"gnutls28","fixed_in":["3.4.10-4ubuntu1.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"gnutls28","fixed_in":["3.5.18-1ubuntu1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.19-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.19-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.19-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.30-0+deb8u1"}]}],"versions":["3.3.10-1","3.3.10-2","3.3.11-1","3.3.12-1","3.3.13-1","3.3.14-1","3.3.14-2","3.3.14-3","3.3.15-1","3.3.15-2","3.3.15-3","3.3.15-4","3.3.15-5","3.3.15-6","3.3.15-7","3.3.16-1","3.3.16-2","3.3.17-1","3.3.18-1","3.3.19-1","3.3.20-1","3.3.8-6","3.3.8-6+deb8u1","3.3.8-6+deb8u2","3.3.8-6+deb8u3","3.3.8-6+deb8u4","3.3.8-6+deb8u5","3.3.8-6+deb8u6","3.3.8-6+deb8u7","3.3.8-7","3.3.9-1"],"bundled":3},{"source":"osv","ecosystem":"Mageia:6","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.13-1.1.mga6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.29-8.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.29-8.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.29-8.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.29-8.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.29-8.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.29-8.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.29-8.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.29-8.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.29-8.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.29-8.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.29-8.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.29-8.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.29-8.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.29-8.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.29-8.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.29-8.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.29-8.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.29-8.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.29-8.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.29-8.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.29-8.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.29-8.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.29-8.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.29-8.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.15-18.6.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.15-18.6.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.15-18.6.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.15-18.6.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.15-18.6.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.15-18.6.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.15-18.6.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.15-18.6.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.27-3.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.27-3.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.27-3.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.27-3.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.2-6.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.2-6.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"gnutls26","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.12.23-1ubuntu4","2.12.23-1ubuntu5","2.12.23-12ubuntu1","2.12.23-12ubuntu2","2.12.23-12ubuntu2.1","2.12.23-12ubuntu2.2","2.12.23-12ubuntu2.3","2.12.23-12ubuntu2.4","2.12.23-12ubuntu2.5","2.12.23-12ubuntu2.6","2.12.23-12ubuntu2.7","2.12.23-12ubuntu2.8","2.12.23-12ubuntu2.10+esm1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.10-4ubuntu1.5"}]}],"versions":["3.3.15-5ubuntu2","3.3.18-1ubuntu1","3.3.20-1ubuntu1","3.4.9-2ubuntu1","3.4.10-4ubuntu1","3.4.10-4ubuntu1.1","3.4.10-4ubuntu1.2","3.4.10-4ubuntu1.3","3.4.10-4ubuntu1.4"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.18-1ubuntu1.1"}]}],"versions":["3.5.8-6ubuntu3","3.5.17-1ubuntu1","3.5.17-1ubuntu3","3.5.18-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.10-4ubuntu1.5"}]}],"versions":["3.3.15-5ubuntu2","3.3.18-1ubuntu1","3.3.20-1ubuntu1","3.4.9-2ubuntu1","3.4.10-4ubuntu1","3.4.10-4ubuntu1.1","3.4.10-4ubuntu1.2","3.4.10-4ubuntu1.3","3.4.10-4ubuntu1.4"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.18-1ubuntu1.1"}]}],"versions":["3.5.8-6ubuntu3","3.5.17-1ubuntu1","3.5.17-1ubuntu3","3.5.18-1ubuntu1"],"bundled":4}],"products":[{"vendor":"[unknown]","product":"gnutls"},{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"gnu","product":"gnutls"},{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_workstation"}],"references":[{"url":"https://eprint.iacr.org/2018/747","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","article","report"]},{"url":"https://gitlab.com/gnutls/gnutls/merge_requests/657","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Third Party Advisory","fix"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3505","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Broken Link","advisory"]},{"url":"http://www.securityfocus.com/bid/105138","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10844","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Third Party Advisory","fix"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3050","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/10/msg00022.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://usn.ubuntu.com/3999-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WDYY3R4F5CUTFAMXH2C5NKYFVDEJLTT7/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ILMOWPKMTZAIMK5F32TUMO34XCABUCFJ/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10844","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ILMOWPKMTZAIMK5F32TUMO34XCABUCFJ/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WDYY3R4F5CUTFAMXH2C5NKYFVDEJLTT7/"},{"url":"https://access.redhat.com/security/cve/CVE-2018-10844","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1582571","tags":["report"]},{"url":"https://github.com/advisories/GHSA-9779-jfg9-frm3"},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-10844","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2018-0435.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=23682","tags":["report"]},{"url":"https://lists.opensuse.org/opensuse-updates/2018-09/msg00147.html","tags":["web"]},{"url":"https://lists.opensuse.org/opensuse-updates/2018-10/msg00000.html","tags":["web"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.6_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1375307","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1434091","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1444792","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1460125","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1464896","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1561481","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1582572","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1582574","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3050.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10844","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10845","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10845","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10845","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10846","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10846","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10846","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182825-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1047002","tags":["report"]},{"url":"https://bugzilla.suse.com/1105437","tags":["report"]},{"url":"https://bugzilla.suse.com/1105459","tags":["report"]},{"url":"https://bugzilla.suse.com/1105460","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10790","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10844","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10845","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10846","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182825-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182842-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182930-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-10844","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3999-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-10845","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10846","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-3829","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-3836","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2018-10844","description":"It was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky thirteen style attack. Remote attackers could use this flaw to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data using crafted packets.","status":"published","published":"2018-08-22T13:00:00Z","modified":"2024-08-05T07:46:46.944Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-385"],"updated_at":"2026-11-02T14:35:01.619448Z"}],"euvd":[{"id":"EUVD-2018-2913","description":"It was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky thirteen style attack. Remote attackers could use this flaw to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data using crafted packets.","status":"published","published":"2018-08-22T13:00:00Z","modified":"2024-08-05T07:46:46Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T02:39:57.544825Z"}],"ghsa":[{"id":"GHSA-9779-jfg9-frm3","title":"It was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky thirteen...","description":"It was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky thirteen style attack. Remote attackers could use this flaw to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data using crafted packets.","status":"published","published":"2022-05-13T01:14:22Z","modified":"2023-02-13T06:32:01Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-327","CWE-385"],"updated_at":"2026-11-02T14:54:06.501947Z"}],"nvd":[{"id":"CVE-2018-10844","description":"It was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky thirteen style attack. Remote attackers could use this flaw to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data using crafted packets.","status":"published","published":"2018-08-22T13:29:00.317Z","modified":"2026-06-17T01:34:44.917Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-385","CWE-327"],"updated_at":"2026-11-02T14:04:36.842579Z"}],"osv":[{"id":"CVE-2018-10844","description":"It was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky thirteen style attack. Remote attackers could use this flaw to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data using crafted packets.","status":"published","published":"2018-08-22T13:29:00.317Z","modified":"2026-10-24T10:30:32.542752983Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:07.641418Z"},{"id":"DEBIAN-CVE-2018-10844","description":"It was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky thirteen style attack. Remote attackers could use this flaw to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data using crafted packets.","status":"published","published":"2018-08-22T13:29:00.317Z","modified":"2026-10-23T18:01:43.163328557Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:29.988046Z"},{"id":"RHSA-2018:3050","title":"Red Hat Security Advisory: gnutls security, bug fix, and enhancement update","status":"published","published":"2024-09-16T01:08:46Z","modified":"2026-07-01T10:04:46Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"UBUNTU-CVE-2018-10844","description":"It was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky thirteen style attack. Remote attackers could use this flaw to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data using crafted packets.","status":"published","published":"2018-08-22T00:00:00Z","modified":"2026-07-22T11:33:20.295296221Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"},{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:16.544091Z"},{"id":"DLA-1560-1","title":"gnutls28 - security update","status":"published","published":"2018-10-30T00:00:00Z","modified":"2026-03-09T01:02:02.567337Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"MGASA-2018-0435","title":"Updated gnutls packages fix security vulnerabilities","description":"The updated packages fix security vulnerabilities:\n\nIt was found that the GnuTLS implementation of HMAC-SHA-256 and\nHMAC-SHA-384 was vulnerable to a Lucky thirteen style attack. Remote\nattackers could use this flaw to conduct distinguishing attacks and\nplaintext-recovery attacks via statistical analysis of timing data\nusing crafted packets (CVE-2018-10844, CVE-2018-10845).\n\nA cache-based side channel in GnuTLS implementation that leads to plain\ntext recovery in cross-VM attack setting was found. An attacker could\nuse a combination of \"Just in Time\" Prime+probe attack in combination\nwith Lucky-13 attack to recover plain text using crafted packets\n(CVE-2018-10846).\n","status":"published","published":"2018-11-03T11:55:18Z","modified":"2026-04-16T06:26:17.865736655Z","updated_at":"2026-11-02T15:49:40.793816Z"},{"id":"SUSE-SU-2018:2825-1","title":"Security update for gnutls","description":"This update for gnutls fixes the following issues:\n\nThis update for gnutls fixes the following issues:\n\nSecurity issues fixed:\n\n- Improved mitigations against Lucky 13 class of attacks\n- 'Just in Time' PRIME + PROBE cache-based side channel attack can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)\n- HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of wrong constant (CVE-2018-10845, bsc#1105459)\n- HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not enough dummy function calls (CVE-2018-10844, bsc#1105437)\n- The _asn1_check_identifier function in Libtasn1 caused a NULL pointer dereference and crash (CVE-2017-10790, bsc#1047002)\n","status":"published","published":"2018-09-24T08:10:59Z","modified":"2026-02-04T04:30:10.307659Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2018:2825-2","title":"Security update for gnutls","description":"This update for gnutls fixes the following issues:\n\nThis update for gnutls fixes the following issues:\n\nSecurity issues fixed:\n\n- Improved mitigations against Lucky 13 class of attacks\n- 'Just in Time' PRIME + PROBE cache-based side channel attack can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)\n- HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of wrong constant (CVE-2018-10845, bsc#1105459)\n- HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not enough dummy function calls (CVE-2018-10844, bsc#1105437)\n- The _asn1_check_identifier function in Libtasn1 caused a NULL pointer dereference and crash (CVE-2017-10790, bsc#1047002)\n","status":"published","published":"2018-10-18T12:50:50Z","modified":"2026-02-04T02:49:43.142633Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2018:2842-1","title":"Security update for gnutls","description":"This update for gnutls fixes the following issues:\n\nSecurity issues fixed:\n\n- Improved mitigations against Lucky 13 class of attacks\n  - 'Just in Time' PRIME + PROBE cache-based side channel attack can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)\n  - HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of wrong constant (CVE-2018-10845, bsc#1105459)\n  - HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not enough dummy function calls (CVE-2018-10844, bsc#1105437)\n- The _asn1_check_identifier function in Libtasn1 caused a NULL pointer dereference and crash (CVE-2017-10790, bsc#1047002)\n","status":"published","published":"2018-09-24T10:55:04Z","modified":"2026-02-04T02:15:14.878471Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2018:2930-1","title":"Security update for gnutls","description":"This update for gnutls fixes the following security issues:\n\n- Improved mitigations against Lucky 13 class of attacks\n- CVE-2018-10846: 'Just in Time' PRIME + PROBE cache-based side channel attack\n  can lead to plaintext recovery (bsc#1105460)\n- CVE-2018-10845: HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use\n  of wrong constant (bsc#1105459)\n- CVE-2018-10844: HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not\n  enough dummy function calls (bsc#1105437)\n- CVE-2017-10790: The _asn1_check_identifier function in Libtasn1 caused a NULL\n  pointer dereference and crash (bsc#1047002)\n","status":"published","published":"2018-09-28T06:02:06Z","modified":"2025-05-02T04:06:05.678039Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"USN-3999-1","title":"gnutls28 vulnerabilities","description":"Eyal Ronen, Kenneth G. Paterson, and Adi Shamir discovered that GnuTLS was\nvulnerable to a timing side-channel attack known as the \"Lucky Thirteen\"\nissue. A remote attacker could possibly use this issue to perform\nplaintext-recovery attacks via analysis of timing data. This issue only\naffected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2018-10844,\nCVE-2018-10845, CVE-2018-10846)\n\nTavis Ormandy discovered that GnuTLS incorrectly handled memory when\nverifying certain X.509 certificates. A remote attacker could use this\nissue to cause GnuTLS to crash, resulting in a denial of service, or\npossibly execute arbitrary code. This issue only affected Ubuntu 18.04 LTS,\nUbuntu 18.10, and Ubuntu 19.04. (CVE-2019-3829)\n\nIt was discovered that GnuTLS incorrectly handled certain post-handshake\nmessages. A remote attacker could use this issue to cause GnuTLS to crash,\nresulting in a denial of service, or possibly execute arbitrary code. This\nissue only affected Ubuntu 18.10 and Ubuntu 19.04. (CVE-2019-3836)\n","status":"published","published":"2019-05-30T13:23:52Z","modified":"2026-04-27T15:33:05.032527662Z","updated_at":"2026-11-02T16:58:14.019824Z"}]}}