{"id":"CVE-2018-16868","aliases":["DEBIAN-CVE-2018-16868","EUVD-2018-8659","GHSA-qjx3-4wr5-3c93","MGASA-2019-0103","SUSE-SU-2019:1121-1","SUSE-SU-2019:1351-1","SUSE-SU-2019:1351-2","UBUNTU-CVE-2018-16868","openSUSE-SU-2019:1353-1","openSUSE-SU-2019:1477-1"],"status":"published","title":"A Bleichenbacher type side-channel based padding oracle attack was found in the way gnutls...","description":"A Bleichenbacher type side-channel based padding oracle attack was found in the way gnutls handles verification of RSA decrypted PKCS#1 v1.5 data. An attacker who is able to run process on the same physical core as the victim process, could use this to extract plaintext or in some cases downgrade any TLS connections to a vulnerable server.","severity":{"version":"3.0","score":4.7,"vector":"CVSS:3.0/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.00577,"percentile":0.47839,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-203"],"published":"2018-12-03T14:00:00Z","modified":"2026-10-24T10:30:29Z","fixes":[{"ecosystem":"Debian:12","package":"gnutls28","fixed_in":["3.6.5-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"gnutls28","fixed_in":["3.6.5-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"gnutls28","fixed_in":["3.6.5-2"],"sources":["osv"]},{"ecosystem":"Mageia:6","package":"gnutls","fixed_in":["3.5.13-1.2.mga6"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"gnutls","fixed_in":["3.6.7-6.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15","package":"gnutls","fixed_in":["3.6.7-6.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"gnutls","fixed_in":["3.6.7-6.11.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.0","package":"gnutls","fixed_in":["3.6.7-lp151.2.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.1","package":"gnutls","fixed_in":["3.6.7-lp151.2.3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.5-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.5-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.5-2"}]}]},{"source":"osv","ecosystem":"Mageia:6","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.13-1.2.mga6"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-6.8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-6.8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-6.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-6.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-6.11.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"gnutls26","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.12.23-1ubuntu4","2.12.23-1ubuntu5","2.12.23-12ubuntu1","2.12.23-12ubuntu2","2.12.23-12ubuntu2.1","2.12.23-12ubuntu2.2","2.12.23-12ubuntu2.3","2.12.23-12ubuntu2.4","2.12.23-12ubuntu2.5","2.12.23-12ubuntu2.6","2.12.23-12ubuntu2.7","2.12.23-12ubuntu2.8","2.12.23-12ubuntu2.10+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.3.15-5ubuntu2","3.3.18-1ubuntu1","3.3.20-1ubuntu1","3.4.9-2ubuntu1","3.4.10-4ubuntu1","3.4.10-4ubuntu1.1","3.4.10-4ubuntu1.2","3.4.10-4ubuntu1.3","3.4.10-4ubuntu1.4","3.4.10-4ubuntu1.5","3.4.10-4ubuntu1.6","3.4.10-4ubuntu1.7","3.4.10-4ubuntu1.8","3.4.10-4ubuntu1.9","3.4.10-4ubuntu1.9+esm1","3.4.10-4ubuntu1.9+esm2","3.4.10-4ubuntu1.9+esm3","3.4.10-4ubuntu1.9+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.5.8-6ubuntu3","3.5.17-1ubuntu1","3.5.17-1ubuntu3","3.5.18-1ubuntu1","3.5.18-1ubuntu1.1","3.5.18-1ubuntu1.2","3.5.18-1ubuntu1.3","3.5.18-1ubuntu1.4","3.5.18-1ubuntu1.5","3.5.18-1ubuntu1.6","3.5.18-1ubuntu1.6+esm1","3.5.18-1ubuntu1.6+esm2","3.5.18-1ubuntu1.6+esm3","3.5.18-1ubuntu1.6+esm4"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-lp150.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-lp151.2.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-lp151.2.3.1"}]}]}],"products":[{"vendor":"[unknown]","product":"gnutls"},{"vendor":"gnu","product":"gnutls"}],"references":[{"url":"http://www.securityfocus.com/bid/106080","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00017.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Broken Link","Mailing List","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00068.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Broken Link","Mailing List","Third Party Advisory","advisory"]},{"url":"http://cat.eyalro.net/","tags":["x_refsource_MISC","x_transferred","Technical Description","Third Party Advisory","advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16868","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16868"},{"url":"https://github.com/advisories/GHSA-qjx3-4wr5-3c93"},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-16868","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2019-0103.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=24066","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/INZ7O52ANE3RPKUWDI3TKPVVHQNKHVKY/","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191121-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1118087","tags":["report"]},{"url":"https://bugzilla.suse.com/1130681","tags":["report"]},{"url":"https://bugzilla.suse.com/1130682","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16868","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3836","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191351-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1134856","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191351-2/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-16868","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16868","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/U54THELOIOH5SPZKOQO47AOLQUWXG7TU/#U54THELOIOH5SPZKOQO47AOLQUWXG7TU","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JKRDUJCDYX67IJDQ2D543SJDEUE4K7MO/#JKRDUJCDYX67IJDQ2D543SJDEUE4K7MO","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2018-16868","description":"A Bleichenbacher type side-channel based padding oracle attack was found in the way gnutls handles verification of RSA decrypted PKCS#1 v1.5 data. An attacker who is able to run process on the same physical core as the victim process, could use this to extract plaintext or in some cases downgrade any TLS connections to a vulnerable server.","status":"published","published":"2018-12-03T14:00:00Z","modified":"2024-08-05T10:32:54.146Z","cvss":[{"version":"3.0","score":4.7,"vector":"CVSS:3.0/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-203"],"updated_at":"2026-11-02T14:35:11.072321Z"}],"euvd":[{"id":"EUVD-2018-8659","description":"A Bleichenbacher type side-channel based padding oracle attack was found in the way gnutls handles verification of RSA decrypted PKCS#1 v1.5 data. An attacker who is able to run process on the same physical core as the victim process, could use this to extract plaintext or in some cases downgrade any TLS connections to a vulnerable server.","status":"published","published":"2018-12-03T14:00:00Z","modified":"2024-08-05T10:32:54Z","cvss":[{"version":"3.0","score":4.7,"vector":"CVSS:3.0/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T02:39:40.316949Z"}],"ghsa":[{"id":"GHSA-qjx3-4wr5-3c93","title":"A Bleichenbacher type side-channel based padding oracle attack was found in the way gnutls...","description":"A Bleichenbacher type side-channel based padding oracle attack was found in the way gnutls handles verification of RSA decrypted PKCS#1 v1.5 data. An attacker who is able to run process on the same physical core as the victim process, could use this to extract plaintext or in some cases downgrade any TLS connections to a vulnerable server.","status":"published","published":"2022-05-13T01:12:25Z","modified":"2023-02-01T05:03:58Z","cvss":[{"version":"3.1","score":5.6,"vector":"CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N","level":"medium"}],"cwes":["CWE-203"],"updated_at":"2026-11-02T14:50:07.322817Z"}],"nvd":[{"id":"CVE-2018-16868","description":"A Bleichenbacher type side-channel based padding oracle attack was found in the way gnutls handles verification of RSA decrypted PKCS#1 v1.5 data. An attacker who is able to run process on the same physical core as the victim process, could use this to extract plaintext or in some cases downgrade any TLS connections to a vulnerable server.","status":"published","published":"2018-12-03T14:29:00.333Z","modified":"2026-06-17T01:44:57.103Z","cvss":[{"version":"3.1","score":5.6,"vector":"CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N","level":"medium","assessor":"primary"},{"version":"3.0","score":4.7,"vector":"CVSS:3.0/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"2.0","score":3.3,"vector":"AV:L/AC:M/Au:N/C:P/I:P/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-203"],"updated_at":"2026-11-02T14:04:49.995593Z"}],"osv":[{"id":"CVE-2018-16868","description":"A Bleichenbacher type side-channel based padding oracle attack was found in the way gnutls handles verification of RSA decrypted PKCS#1 v1.5 data. An attacker who is able to run process on the same physical core as the victim process, could use this to extract plaintext or in some cases downgrade any TLS connections to a vulnerable server.","status":"published","published":"2018-12-03T14:29:00.333Z","modified":"2026-10-24T10:30:29.228720506Z","cvss":[{"version":"3.1","score":5.6,"vector":"CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:08.533609Z"},{"id":"DEBIAN-CVE-2018-16868","description":"A Bleichenbacher type side-channel based padding oracle attack was found in the way gnutls handles verification of RSA decrypted PKCS#1 v1.5 data. An attacker who is able to run process on the same physical core as the victim process, could use this to extract plaintext or in some cases downgrade any TLS connections to a vulnerable server.","status":"published","published":"2018-12-03T14:29:00.333Z","modified":"2026-10-23T18:03:19.784134115Z","cvss":[{"version":"3.1","score":5.6,"vector":"CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:30.290351Z"},{"id":"UBUNTU-CVE-2018-16868","description":"A Bleichenbacher type side-channel based padding oracle attack was found in the way gnutls handles verification of RSA decrypted PKCS#1 v1.5 data. An attacker who is able to run process on the same physical core as the victim process, could use this to extract plaintext or in some cases downgrade any TLS connections to a vulnerable server.","status":"published","published":"2018-12-03T14:29:00Z","modified":"2026-07-22T11:33:20.657886175Z","cvss":[{"version":"3.1","score":5.6,"vector":"CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N","level":"medium"},{"version":"3.0","score":4.7,"vector":"CVSS:3.0/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N","level":"medium"},{"version":"3.0","score":5.6,"vector":"CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:17.496046Z"},{"id":"MGASA-2019-0103","title":"Updated gnutls packages fix security vulnerability","description":"A Bleichenbacher type side-channel based padding oracle attack was found\nin the way gnutls handles verification of RSA decrypted PKCS#1 v1.5 data.\nAn attacker who is able to run process on the same physical core as the\nvictim process, could use this to extract plaintext or in some cases\ndowngrade any TLS connections to a vulnerable server. (CVE-2018-16868)\n","status":"published","published":"2019-03-07T16:34:45Z","modified":"2026-04-16T04:41:39.204854054Z","updated_at":"2026-11-02T15:49:40.793816Z"},{"id":"openSUSE-SU-2019:1353-1","title":"Security update for gnutls","description":"This update for gnutls fixes to version 3.6.7 the following issues:\n\nSecurity issued fixed:\n\n- CVE-2019-3836: Fixed an invalid pointer access via malformed TLS1.3 async messages (bsc#1130682).\n- CVE-2019-3829: Fixed a double free vulnerability in the certificate verification API (bsc#1130681).\n- CVE-2018-16868: Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification and padding oracle verification (bsc#1118087)\n\nNon-security issue fixed:\n\n- Update gnutls to support TLS 1.3 (fate#327114) \n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-05-08T15:04:35Z","modified":"2026-02-04T03:19:42.812589Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2019:1477-1","title":"Security update for gnutls","description":"This update for gnutls fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2018-16868: Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification (bsc#1118087).\n\nNon-security issue fixed:\n\n- Explicitly require libnettle 3.4.1 to prevent missing symbol errors (bsc#1134856).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-05-30T06:18:35Z","modified":"2025-05-07T18:10:07.713845Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"SUSE-SU-2019:1121-1","title":"Security update for gnutls","description":"This update for gnutls fixes to version 3.6.7 the following issues:\n\nSecurity issued fixed:\n\n- CVE-2019-3836: Fixed an invalid pointer access via malformed TLS1.3 async messages (bsc#1130682).\n- CVE-2019-3829: Fixed a double free vulnerability in the certificate verification API (bsc#1130681).\n- CVE-2018-16868: Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification and padding oracle verification (bsc#1118087)\n\nNon-security issue fixed:\n\n- Update gnutls to support TLS 1.3 (fate#327114) \n","status":"published","published":"2019-04-30T16:02:47Z","modified":"2026-02-04T04:32:05.837417Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:1351-1","title":"Security update for gnutls","description":"This update for gnutls fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2018-16868: Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification (bsc#1118087).\n\nNon-security issue fixed:\n\n- Explicitly require libnettle 3.4.1 to prevent missing symbol errors (bsc#1134856).\n","status":"published","published":"2019-05-24T12:41:14Z","modified":"2026-02-04T02:35:22.040919Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:1351-2","title":"Security update for gnutls","description":"This update for gnutls fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2018-16868: Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification (bsc#1118087).\n\nNon-security issue fixed:\n\n- Explicitly require libnettle 3.4.1 to prevent missing symbol errors (bsc#1134856).\n","status":"published","published":"2019-07-01T13:03:03Z","modified":"2026-02-04T02:41:08.807424Z","updated_at":"2026-11-02T15:53:45.926331Z"}]}}