SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2020-13777

GnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of confidentiality in TLS 1.2, and an authentication bypass in TLS 1.3).

HIGH 7.4EPSS 17.5%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 17.5%, higher than 97% of all known CVEs. Patch or mitigate before the next change window.

Description

GnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of confidentiality in TLS 1.2, and an authentication bypass in TLS 1.3). The earliest affected version is 3.6.4 (2018-09-24) because of an error in a 2018-09-18 commit. Until the first key rotation, the TLS server always uses wrong data in place of an encryption key derived from an application.

CVSS 3.1
7.4 HIGHCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS
17.51% probability · 97th percentile
CISA KEV
Not listed
Weakness
CWE-327
Affected
gnu/gnutls · fedoraproject/fedora · canonical/ubuntu linux · debian/debian linux
Source
cve@mitre.org

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.