{"id":"CVE-2024-28834","aliases":["ALPINE-CVE-2024-28834","ALSA-2024:1784","ALSA-2024:1879","ALSA-2024:2570","AZL-37084","AZL-37109","BELL-CVE-2024-28834","CLSA-2024-1726769216","CLSA-2024-1728056228","CLSA-2024-1728056381","CLSA-2025-1747903683","DEBIAN-CVE-2024-28834","DLA-3875-1","EUVD-2024-25920","GHSA-frvc-6356-58xm","MGASA-2024-0089","OESA-2024-1439","RHSA-2024:1784","RHSA-2024:1879","RHSA-2024:1997","RHSA-2024:2044","RHSA-2024:2570","RHSA-2024:2889","RLSA-2024:1784","RLSA-2024:2570","SUSE-SU-2024:1271-1","SUSE-SU-2024:1271-2","SUSE-SU-2024:1271-3","SUSE-SU-2024:2546-1","SUSE-SU-2025:20017-1","UBUNTU-CVE-2024-28834","USN-6733-1","USN-6733-2","openSUSE-SU-2024:13806-1"],"status":"published","title":"Gnutls: vulnerable to minerva side-channel information leak","description":"A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such as when using the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag, it can result in a noticeable step in nonce size from 513 to 512 bits, exposing a potential timing side-channel.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00724,"percentile":0.54331,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-200","CWE-327"],"published":"2024-03-21T13:29:11Z","modified":"2026-11-02T12:01:30Z","fixes":[{"ecosystem":"Alpine:v3.18","package":"gnutls","fixed_in":["3.8.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"gnutls","fixed_in":["3.8.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"gnutls","fixed_in":["3.8.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"gnutls","fixed_in":["3.8.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"gnutls","fixed_in":["3.8.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"gnutls","fixed_in":["3.8.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"gnutls","fixed_in":["3.8.5-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"gnutls","fixed_in":["3.6.16-8.el8_9.3"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"gnutls-c++","fixed_in":["3.6.16-8.el8_9.3"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"gnutls-dane","fixed_in":["3.6.16-8.el8_9.3"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"gnutls-devel","fixed_in":["3.6.16-8.el8_9.3"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"gnutls-utils","fixed_in":["3.6.16-8.el8_9.3"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"gnutls","fixed_in":["3.7.11-1"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"gnutls","fixed_in":["3.8.3-2"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"gnutls","fixed_in":["3.7.11-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"gnutls","fixed_in":["3.8.5-r0"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"gnutls","fixed_in":["3.7.6-21.el9_2.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"gnutls-c++","fixed_in":["3.7.6-21.el9_2.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"gnutls-dane","fixed_in":["3.7.6-21.el9_2.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"gnutls-devel","fixed_in":["3.7.6-21.el9_2.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"gnutls-utils","fixed_in":["3.7.6-21.el9_2.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"gnutls","fixed_in":["3.6.16-4.el8.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"gnutls-c++","fixed_in":["3.6.16-4.el8.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"gnutls-dane","fixed_in":["3.6.16-4.el8.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"gnutls-devel","fixed_in":["3.6.16-4.el8.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"gnutls-utils","fixed_in":["3.6.16-4.el8.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"gnutls","fixed_in":["3.6.16-4.el8.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"gnutls-c++","fixed_in":["3.6.16-4.el8.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"gnutls-dane","fixed_in":["3.6.16-4.el8.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"gnutls-devel","fixed_in":["3.6.16-4.el8.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"gnutls-utils","fixed_in":["3.6.16-4.el8.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"gnutls28","fixed_in":["3.7.9-2+deb12u3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"gnutls28","fixed_in":["3.8.4-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"gnutls28","fixed_in":["3.8.4-2"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"gnutls","fixed_in":["3.6.14-16.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"gnutls","fixed_in":["3.6.14-16.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"gnutls","fixed_in":["3.7.2-13.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"gnutls","fixed_in":["3.7.2-13.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP2","package":"gnutls","fixed_in":["3.7.2-13.oe2203sp2"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"gnutls","fixed_in":["3.7.2-13.oe2203sp3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-c++","fixed_in":["0:3.6.16-8.el8_9.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-c++-debuginfo","fixed_in":["0:3.6.16-8.el8_9.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-dane","fixed_in":["0:3.6.16-8.el8_9.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-dane-debuginfo","fixed_in":["0:3.6.16-8.el8_9.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-debuginfo","fixed_in":["0:3.6.16-8.el8_9.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-debugsource","fixed_in":["0:3.6.16-8.el8_9.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-devel","fixed_in":["0:3.6.16-8.el8_9.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-utils","fixed_in":["0:3.6.16-8.el8_9.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-utils-debuginfo","fixed_in":["0:3.6.16-8.el8_9.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls","fixed_in":["0:3.6.16-8.el8_9.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-c++-debuginfo","fixed_in":["0:3.6.16-8.el8_9.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-dane-debuginfo","fixed_in":["0:3.6.16-8.el8_9.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-debuginfo","fixed_in":["0:3.6.16-8.el8_9.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-debugsource","fixed_in":["0:3.6.16-8.el8_9.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-utils-debuginfo","fixed_in":["0:3.6.16-8.el8_9.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"gnutls-c++","fixed_in":["0:3.6.16-7.el8_8.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"gnutls-c++-debuginfo","fixed_in":["0:3.6.16-7.el8_8.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"gnutls-dane","fixed_in":["0:3.6.16-7.el8_8.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"gnutls-dane-debuginfo","fixed_in":["0:3.6.16-7.el8_8.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"gnutls-debuginfo","fixed_in":["0:3.6.16-7.el8_8.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"gnutls-debugsource","fixed_in":["0:3.6.16-7.el8_8.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"gnutls-devel","fixed_in":["0:3.6.16-7.el8_8.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"gnutls-utils","fixed_in":["0:3.6.16-7.el8_8.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"gnutls-utils-debuginfo","fixed_in":["0:3.6.16-7.el8_8.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"gnutls","fixed_in":["0:3.6.16-7.el8_8.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"gnutls-c++-debuginfo","fixed_in":["0:3.6.16-7.el8_8.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"gnutls-dane-debuginfo","fixed_in":["0:3.6.16-7.el8_8.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"gnutls-debuginfo","fixed_in":["0:3.6.16-7.el8_8.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"gnutls-debugsource","fixed_in":["0:3.6.16-7.el8_8.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"gnutls-utils-debuginfo","fixed_in":["0:3.6.16-7.el8_8.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"gnutls-c++","fixed_in":["0:3.6.16-5.el8_6.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"gnutls-c++-debuginfo","fixed_in":["0:3.6.16-5.el8_6.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"gnutls-dane","fixed_in":["0:3.6.16-5.el8_6.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"gnutls-dane-debuginfo","fixed_in":["0:3.6.16-5.el8_6.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"gnutls-debuginfo","fixed_in":["0:3.6.16-5.el8_6.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"gnutls-debugsource","fixed_in":["0:3.6.16-5.el8_6.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"gnutls-devel","fixed_in":["0:3.6.16-5.el8_6.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"gnutls-utils","fixed_in":["0:3.6.16-5.el8_6.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"gnutls-utils-debuginfo","fixed_in":["0:3.6.16-5.el8_6.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"gnutls","fixed_in":["0:3.6.16-5.el8_6.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"gnutls-c++-debuginfo","fixed_in":["0:3.6.16-5.el8_6.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"gnutls-dane-debuginfo","fixed_in":["0:3.6.16-5.el8_6.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"gnutls-debuginfo","fixed_in":["0:3.6.16-5.el8_6.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"gnutls-debugsource","fixed_in":["0:3.6.16-5.el8_6.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"gnutls-utils-debuginfo","fixed_in":["0:3.6.16-5.el8_6.4"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"gnutls","fixed_in":["0:3.6.16-8.el8_9.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"gnutls28","fixed_in":["3.6.13-2ubuntu1.11"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"gnutls28","fixed_in":["3.7.3-4ubuntu1.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"gnutls28","fixed_in":["3.8.3-1.1ubuntu3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.18","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.5-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-8.el8_9.3"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-8.el8_9.3"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-8.el8_9.3"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-8.el8_9.3"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-8.el8_9.3"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-23.el9_3.4"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-23.el9_3.4"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-23.el9_3.4"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-23.el9_3.4"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-23.el9_3.4"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.3-4.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.3-4.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.3-4.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.3-4.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.3-4.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Azure Linux:2","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.11-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.3-2"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.7.8-r2"},{"fixed":"3.7.11-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.8.0-r3"},{"fixed":"3.8.5-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-21.el9_2.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-21.el9_2.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-21.el9_2.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-21.el9_2.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-21.el9_2.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-4.el8.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-4.el8.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-4.el8.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-4.el8.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-4.el8.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-4.el8.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-4.el8.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-4.el8.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-4.el8.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-4.el8.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-23.el9_2.tuxcare.3.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-23.el9_2.tuxcare.3.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-23.el9_2.tuxcare.3.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-23.el9_2.tuxcare.3.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-23.el9_2.tuxcare.3.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.9-2+deb12u3"}]}],"versions":["3.7.9-2","3.7.9-2+deb12u1","3.7.9-2+deb12u2"]},{"source":"osv","ecosystem":"Debian:13","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.4-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.4-2"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.1-5+deb11u6"}]}],"versions":["3.7.1-5","3.7.1-5+deb11u1","3.7.1-5+deb11u2","3.7.1-5+deb11u3","3.7.1-5+deb11u4","3.7.1-5+deb11u5"],"bundled":2},{"source":"osv","ecosystem":"Mageia:9","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.4-1.mga9"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.14-16.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.14-16.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.2-13.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.2-13.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.2-13.oe2203sp2"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.2-13.oe2203sp3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_9.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_9.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_9.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_9.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_9.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_9.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_9.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_9.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_9.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_9.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_9.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_9.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_9.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_9.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_9.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-23.el9_3.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-23.el9_3.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-23.el9_3.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-23.el9_3.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-23.el9_3.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-23.el9_3.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-23.el9_3.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-23.el9_3.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-23.el9_3.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-23.el9_3.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-23.el9_3.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-23.el9_3.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-23.el9_3.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-23.el9_3.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-23.el9_3.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-7.el8_8.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-5.el8_6.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-4.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-4.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-4.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-4.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-4.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-4.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-4.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-4.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-4.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-4.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-4.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-4.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-4.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-4.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-4.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-21.el9_2.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-8.el8_9.3"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.3-4.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-150400.4.44.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-150400.4.44.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-150400.4.44.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.4","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-150400.4.44.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-150400.4.44.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-150400.4.44.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-150400.4.44.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-150400.4.44.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-150400.4.44.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-150400.4.44.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-150400.4.44.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-150400.4.44.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-150400.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.3-2.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.13-2ubuntu1.11"}]}],"versions":["3.6.9-5ubuntu1","3.6.9-5ubuntu2","3.6.10-5","3.6.11.1-2","3.6.11.1-2ubuntu2","3.6.13-2ubuntu1","3.6.13-2ubuntu1.1","3.6.13-2ubuntu1.2","3.6.13-2ubuntu1.3","3.6.13-2ubuntu1.6","3.6.13-2ubuntu1.7","3.6.13-2ubuntu1.8","3.6.13-2ubuntu1.9","3.6.13-2ubuntu1.10"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-4ubuntu1.5"}]}],"versions":["3.7.1-5ubuntu1","3.7.2-2ubuntu1","3.7.2-4ubuntu1","3.7.2-5ubuntu1","3.7.3-4ubuntu1","3.7.3-4ubuntu1.1","3.7.3-4ubuntu1.2","3.7.3-4ubuntu1.3","3.7.3-4ubuntu1.4"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.3-1.1ubuntu3.1"}]}],"versions":["3.8.1-4ubuntu1","3.8.1-4ubuntu6","3.8.1-4ubuntu7","3.8.3-1ubuntu1","3.8.3-1.1ubuntu2","3.8.3-1.1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.13-2ubuntu1.11"}]}],"versions":["3.6.9-5ubuntu1","3.6.9-5ubuntu2","3.6.10-5","3.6.11.1-2","3.6.11.1-2ubuntu2","3.6.13-2ubuntu1","3.6.13-2ubuntu1.1","3.6.13-2ubuntu1.2","3.6.13-2ubuntu1.3","3.6.13-2ubuntu1.6","3.6.13-2ubuntu1.7","3.6.13-2ubuntu1.8","3.6.13-2ubuntu1.9","3.6.13-2ubuntu1.10"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-4ubuntu1.5"}]}],"versions":["3.7.1-5ubuntu1","3.7.2-2ubuntu1","3.7.2-4ubuntu1","3.7.2-5ubuntu1","3.7.3-4ubuntu1","3.7.3-4ubuntu1.1","3.7.3-4ubuntu1.2","3.7.3-4ubuntu1.3","3.7.3-4ubuntu1.4"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.3-1.1ubuntu3.1"}]}],"versions":["3.8.1-4ubuntu1","3.8.1-4ubuntu6","3.8.1-4ubuntu7","3.8.3-1ubuntu1","3.8.3-1.1ubuntu2","3.8.3-1.1ubuntu3"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.4-1.1"}]}],"bundled":2}],"products":[{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.8 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat enterprise linux 9.2 extended update support"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2024:1784","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1879","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1997","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:2044","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:2570","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:2889","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-28834","tags":["vdb-entry","x_refsource_REDHAT","x_transferred","report","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2269228","tags":["issue-tracking","x_refsource_REDHAT","x_transferred","report"]},{"url":"https://lists.gnupg.org/pipermail/gnutls-help/2024-March/004845.html","tags":["x_transferred","web","article","report"]},{"url":"https://minerva.crocs.fi.muni.cz/","tags":["x_transferred","web","article"]},{"url":"http://www.openwall.com/lists/oss-security/2024/03/22/1","tags":["x_transferred","web"]},{"url":"http://www.openwall.com/lists/oss-security/2024/03/22/2","tags":["x_transferred","web"]},{"url":"https://people.redhat.com/~hkario/marvin/","tags":["x_transferred","web","report"]},{"url":"https://security.netapp.com/advisory/ntap-20240524-0004/","tags":["x_transferred","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/09/msg00019.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-28834","tags":["web","advisory"]},{"url":"https://people.redhat.com/~hkario/marvin"},{"url":"https://minerva.crocs.fi.muni.cz"},{"url":"https://security.netapp.com/advisory/ntap-20240524-0004"},{"url":"https://github.com/advisories/GHSA-frvc-6356-58xm"},{"url":"https://security.alpinelinux.org/vuln/CVE-2024-28834","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/2269228","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-1784.html","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-28835","tags":["report"]},{"url":"https://bugzilla.redhat.com/2269084","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-1879.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-2570.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2024-28834","tags":["advisory"]},{"url":"https://errata.tuxcare.com/almalinux9.2-esu/CLSA-2024-1726769216.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2024-1728056228.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.5-els/CLSA-2024-1728056381.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/almalinux9.2-esu/CLSA-2025-1747903683.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-28834","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2024-0089.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=32989","tags":["report"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2024\u0026m=slackware-security.365688","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1439","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1784.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-28834","tags":["advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2269084","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1879.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-28835","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-28835","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1997.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2044.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2570.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2889.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:1784","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:2570","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241271-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1221242","tags":["report"]},{"url":"https://bugzilla.suse.com/1221746","tags":["report"]},{"url":"https://bugzilla.suse.com/1221747","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-28834","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-28835","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241271-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241271-3/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242546-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520017-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-28834","tags":["report"]},{"url":"https://www.gnutls.org/security-new.html#GNUTLS-SA-2023-12-04","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6733-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6733-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-28835","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-28834","title":"Gnutls: vulnerable to minerva side-channel information leak","description":"A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such as when using the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag, it can result in a noticeable step in nonce size from 513 to 512 bits, exposing a potential timing side-channel.","status":"published","published":"2024-03-21T13:29:11.532Z","modified":"2026-11-08T03:06:52.175Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-327"],"updated_at":"2026-11-08T04:37:09.635081Z"}],"euvd":[{"id":"EUVD-2024-25920","description":"A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such as when using the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag, it can result in a noticeable step in nonce size from 513 to 512 bits, exposing a potential timing side-channel.","status":"published","published":"2024-03-21T13:29:11Z","modified":"2026-11-08T03:06:52Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-08T04:11:50.520999Z"}],"ghsa":[{"id":"GHSA-frvc-6356-58xm","title":"A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits...","description":"A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such as when using the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag, it can result in a noticeable step in nonce size from 513 to 512 bits, exposing a potential timing side-channel.","status":"published","published":"2024-03-21T15:31:51Z","modified":"2026-10-15T03:33:15Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-200","CWE-327"],"updated_at":"2026-11-02T15:13:30.561319Z"}],"nvd":[{"id":"CVE-2024-28834","description":"A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such as when using the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag, it can result in a noticeable step in nonce size from 513 to 512 bits, exposing a potential timing side-channel.","status":"published","published":"2024-03-21T14:15:07.547Z","modified":"2026-11-08T04:16:33.837Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-327"],"updated_at":"2026-11-08T07:09:00.584675Z"}],"osv":[{"id":"ALPINE-CVE-2024-28834","description":"A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such as when using the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag, it can result in a noticeable step in nonce size from 513 to 512 bits, exposing a potential timing side-channel.","status":"published","published":"2024-03-21T14:15:07.547Z","modified":"2026-11-02T11:17:50.0853029Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:27:49.709457Z"},{"id":"BELL-CVE-2024-28834","status":"published","published":"2024-03-22T05:56:48.534703Z","modified":"2026-01-26T09:36:30.998307Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:19.66992Z"},{"id":"DEBIAN-CVE-2024-28834","description":"A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such as when using the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag, it can result in a noticeable step in nonce size from 513 to 512 bits, exposing a potential timing side-channel.","status":"published","published":"2024-03-21T14:15:07.547Z","modified":"2026-11-08T09:47:32.415225854Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-08T10:03:28.621517Z"},{"id":"OESA-2024-1439","title":"gnutls security update","description":"GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface (API) to access the secure communications protocols as well as APIs to parse and write X.509, PKCS #12, and other required structures. The project strives to provide a secure communications back-end, simple to use and integrated with the rest of the base Linux libraries. A back-end designed to work and be secure out of the box, keeping the complexity of TLS and PKI out of application code.\r\n\r\nSecurity Fix(es):\r\n\r\nA flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such as when using the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag, it can result in a noticeable step in nonce size from 513 to 512 bits, exposing a potential timing side-channel.(CVE-2024-28834)","status":"published","published":"2024-04-12T11:06:53Z","modified":"2026-08-18T01:18:22.031606521Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:41.095407Z"},{"id":"RHSA-2024:1784","title":"Red Hat Security Advisory: gnutls security update","status":"published","published":"2024-09-12T20:11:52Z","modified":"2026-10-13T10:06:34Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"RHSA-2024:1879","title":"Red Hat Security Advisory: gnutls security update","status":"published","published":"2024-09-16T18:38:02Z","modified":"2026-10-13T10:06:36Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:1997","title":"Red Hat Security Advisory: gnutls security update","status":"published","published":"2024-09-12T20:13:03Z","modified":"2026-10-13T10:06:37Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:2044","title":"Red Hat Security Advisory: gnutls security update","status":"published","published":"2024-09-12T20:13:41Z","modified":"2026-10-13T10:06:38Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:2570","title":"Red Hat Security Advisory: gnutls security update","status":"published","published":"2024-09-16T18:38:13Z","modified":"2026-10-13T10:06:47Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:2889","title":"Red Hat Security Advisory: gnutls security update","status":"published","published":"2024-09-16T18:38:24Z","modified":"2026-10-13T10:06:53Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"UBUNTU-CVE-2024-28834","description":"A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such as when using the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag, it can result in a noticeable step in nonce size from 513 to 512 bits, exposing a potential timing side-channel.","status":"published","published":"2024-03-21T14:15:00Z","modified":"2026-04-22T14:48:08.715612Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T16:54:48.333535Z"},{"id":"ALSA-2024:1784","title":"Moderate: gnutls security update","description":"The gnutls package provide the GNU Transport Layer Security (GnuTLS) library,\nwhich implements cryptographic algorithms and protocols such as SSL, TLS, and\nDTLS.\n\nThis package update fixes a timing side-channel in deterministic ECDSA.\n\nSecurity Fix(es):\n\n* gnutls: vulnerable to Minerva side-channel information leak (CVE-2024-28834)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE page(s)\nlisted in the References section.","status":"published","published":"2024-04-11T00:00:00Z","modified":"2026-10-29T11:02:27.863731277Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"ALSA-2024:1879","title":"Moderate: gnutls security update","description":"The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.\n\nSecurity Fix(es):\n\n* gnutls: vulnerable to Minerva side-channel information leak (CVE-2024-28834)\n* gnutls: potential crash during chain building/verification (CVE-2024-28835)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-04-18T00:00:00Z","modified":"2026-10-29T11:31:05.465878929Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"ALSA-2024:2570","title":"Moderate: gnutls security update","description":"The gnutls package provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.\n\nSecurity Fix(es):\n\n* gnutls: vulnerable to Minerva side-channel information leak (CVE-2024-28834)\n* gnutls: potential crash during chain building/verification (CVE-2024-28835)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-04-30T00:00:00Z","modified":"2026-10-29T11:31:45.833492708Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"AZL-37084","title":"CVE-2024-28834 affecting package gnutls for versions less than 3.7.11-1","description":"A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such as when using the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag, it can result in a noticeable step in nonce size from 513 to 512 bits, exposing a potential timing side-channel.","status":"published","published":"2024-03-21T14:15:07Z","modified":"2026-04-21T04:28:10.35626Z","updated_at":"2026-11-02T15:28:04.608733Z"},{"id":"AZL-37109","title":"CVE-2024-28834 affecting package gnutls for versions less than 3.8.3-2","description":"A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such as when using the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag, it can result in a noticeable step in nonce size from 513 to 512 bits, exposing a potential timing side-channel.","status":"published","published":"2024-03-21T14:15:07Z","modified":"2026-06-27T05:26:09Z","updated_at":"2026-11-02T15:28:04.608733Z"},{"id":"CLSA-2024-1726769216","title":"gnutls: Fix of CVE-2024-28834","description":"- CVE-2024-28834: fix side-channel leak in the deterministic ECDSA","status":"published","published":"2024-09-19T18:06:59Z","modified":"2026-06-01T00:30:19.345534888Z","updated_at":"2026-11-02T15:43:41.281406Z"},{"id":"CLSA-2024-1728056228","title":"gnutls: Fix of CVE-2024-28834","description":"- CVE-2024-28834: fix side-channel leak in the deterministic ECDSA","status":"published","published":"2024-10-04T15:37:11Z","modified":"2026-06-01T00:33:20.704772995Z","updated_at":"2026-11-02T15:43:41.281406Z"},{"id":"CLSA-2024-1728056381","title":"gnutls: Fix of CVE-2024-28834","description":"- CVE-2024-28834: fix side-channel leak in the deterministic ECDSA","status":"published","published":"2024-10-04T15:39:45Z","modified":"2026-06-01T00:33:22.762042814Z","updated_at":"2026-11-02T15:43:41.281406Z"},{"id":"CLSA-2025-1747903683","title":"gnutls: Fix of 2 CVEs","description":"- CVE-2024-28834: fix side-channel leak in the deterministic ECDSA\n- CVE-2024-28835: fix crash when verifying a certificate chain with more than 16\n  certificates","status":"published","published":"2025-05-22T08:48:08Z","modified":"2026-06-01T00:30:47.421232788Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CVE-2024-28834","description":"A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such as when using the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag, it can result in a noticeable step in nonce size from 513 to 512 bits, exposing a potential timing side-channel.","status":"published","published":"2024-03-21T14:15:07Z","modified":"2026-04-16T04:38:33.518614985Z","updated_at":"2026-11-02T15:44:40.06138Z"},{"id":"DLA-3875-1","title":"gnutls28 - security update","status":"published","published":"2024-09-05T00:00:00Z","modified":"2026-03-09T01:18:48.604075Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"MGASA-2024-0089","title":"Updated gnutls packages fix security vulnerabilities","description":"The Minerva attack is a cryptographic vulnerability that exploits\ndeterministic behavior in systems like GnuTLS, leading to side-channel\nleaks. In specific scenarios, such as when using the\nGNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag, it can result in a noticeable\nstep in nonce size from 513 to 512 bits, exposing a potential timing\nside-channel. (CVE-2024-28834)\nA flaw has been discovered in GnuTLS where an application crash can be\ninduced when attempting to verify a specially crafted .pem bundle using\nthe \"certtool --verify-chain\" command. (CVE-2024-28835)\n","status":"published","published":"2024-03-26T08:00:24Z","modified":"2026-04-16T04:42:51.28151645Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2024:13806-1","title":"gnutls-3.8.4-1.1 on GA media","description":"These are all security issues fixed in the gnutls-3.8.4-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:47:53.995924Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"RLSA-2024:1784","title":"Moderate: gnutls security update","description":"The gnutls package provide the GNU Transport Layer Security (GnuTLS) library,\nwhich implements cryptographic algorithms and protocols such as SSL, TLS, and\nDTLS.\n\nThis package update fixes a timing side-channel in deterministic ECDSA.\n\nSecurity Fix(es):\n\n* gnutls: vulnerable to Minerva side-channel information leak (CVE-2024-28834)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE page(s)\nlisted in the References section.","status":"published","published":"2024-05-06T13:04:07.180395Z","modified":"2026-02-04T08:15:06.754526Z","updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"RLSA-2024:2570","title":"Moderate: gnutls security update","description":"The gnutls package provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.\n\nSecurity Fix(es):\n\n* gnutls: vulnerable to Minerva side-channel information leak (CVE-2024-28834)\n\n* gnutls: potential crash during chain building/verification (CVE-2024-28835)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-05-10T14:32:36.204878Z","modified":"2026-02-05T02:45:08.866757Z","updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"SUSE-SU-2024:1271-1","title":"Security update for gnutls","description":"This update for gnutls fixes the following issues:\n\n- CVE-2024-28834: Fixed side-channel in the deterministic ECDSA (bsc#1221746)\n- CVE-2024-28835: Fixed denial of service during certificate chain verification (bsc#1221747)\n\nOther fixes:\n  - jitterentropy: Release the memory of the entropy collector when\n    using jitterentropy with phtreads as there is also a\n    pre-intitization done in the main thread (bsc#1221242)\n","status":"published","published":"2024-04-12T13:35:57Z","modified":"2025-05-02T04:36:39.117123Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"SUSE-SU-2024:1271-2","title":"Security update for gnutls","description":"This update for gnutls fixes the following issues:\n\n- CVE-2024-28834: Fixed side-channel in the deterministic ECDSA (bsc#1221746)\n- CVE-2024-28835: Fixed denial of service during certificate chain verification (bsc#1221747)\n\nOther fixes:\n  - jitterentropy: Release the memory of the entropy collector when\n    using jitterentropy with phtreads as there is also a\n    pre-intitization done in the main thread (bsc#1221242)\n","status":"published","published":"2024-06-03T13:00:49Z","modified":"2026-02-04T02:58:36.735244Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"SUSE-SU-2024:1271-3","title":"Security update for gnutls","description":"This update for gnutls fixes the following issues:\n\n- CVE-2024-28834: Fixed side-channel in the deterministic ECDSA (bsc#1221746)\n- CVE-2024-28835: Fixed denial of service during certificate chain verification (bsc#1221747)\n\nOther fixes:\n  - jitterentropy: Release the memory of the entropy collector when\n    using jitterentropy with phtreads as there is also a\n    pre-intitization done in the main thread (bsc#1221242)\n","status":"published","published":"2024-04-12T13:36:09Z","modified":"2026-02-04T02:49:33.169908Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"SUSE-SU-2024:2546-1","title":"Security update for gnutls","description":"This update for gnutls fixes the following issues:\n\n- CVE-2024-28835: Fixed a certtool crash when verifying a certificate\n  chain (bsc#1221747).\n- CVE-2024-28834: Fixed a side-channel attack in the deterministic\n  ECDSA (bsc#1221746).\n\nOther fixes:\n\n- Fixed a memory leak when using the entropy collector (bsc#1221242).\n","status":"published","published":"2024-07-17T12:44:32Z","modified":"2026-02-04T04:19:01.906719Z","updated_at":"2026-11-02T15:53:55.136363Z"},{"id":"SUSE-SU-2025:20017-1","title":"Security update for gnutls","description":"This update for gnutls fixes the following issues:\n\n- CVE-2024-28835: certtool crash when verifying a certificate chain (bsc#1221747)\n- CVE-2024-28834: Fixed side-channel in the deterministic ECDSA (bsc#1221746)\n- jitterentropy: Release the memory of the entropy collector when using jitterentropy \n  with phtreads as there is also a pre-initialization done in the main thread. (bsc#1221242)\n","status":"published","published":"2025-02-03T08:48:38Z","modified":"2026-03-23T04:50:40.383773Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"USN-6733-1","title":"gnutls28 vulnerabilities","description":"It was discovered that GnuTLS had a timing side-channel when performing\ncertain ECDSA operations. A remote attacker could possibly use this issue\nto recover sensitive information. (CVE-2024-28834)\n\nIt was discovered that GnuTLS incorrectly handled verifying certain PEM\nbundles. A remote attacker could possibly use this issue to cause GnuTLS to\ncrash, resulting in a denial of service. This issue only affected Ubuntu\n22.04 LTS and Ubuntu 23.10. (CVE-2024-28835)\n","status":"published","published":"2024-04-15T16:37:17Z","modified":"2026-04-22T10:45:52.094974Z","updated_at":"2026-11-02T16:58:17.914523Z"},{"id":"USN-6733-2","title":"gnutls28 vulnerabilities","description":"USN-6733-1 fixed vulnerabilities in GnuTLS. This update provides the\ncorresponding updates for Ubuntu 24.04 LTS.\n\nOriginal advisory details:\n\n It was discovered that GnuTLS had a timing side-channel when performing\n certain ECDSA operations. A remote attacker could possibly use this issue\n to recover sensitive information. (CVE-2024-28834)\n \n It was discovered that GnuTLS incorrectly handled verifying certain PEM\n bundles. A remote attacker could possibly use this issue to cause GnuTLS to\n crash, resulting in a denial of service. This issue only affected Ubuntu\n 22.04 LTS and Ubuntu 23.10. (CVE-2024-28835)\n","status":"published","published":"2024-04-29T11:38:34Z","modified":"2026-04-22T10:46:10.193133Z","updated_at":"2026-11-02T16:58:17.914523Z"}]}}