4.3
CVE-2012-0390
- EPSS 1.23%
- Veröffentlicht 06.01.2012 01:55:01
- Zuletzt bearbeitet 16.06.2026 23:37:12
- Erkennungen
LoginThe DTLS implementation in GnuTLS 3.0.10 and earlier executes certain error-handling code only if there is a specific relationship between a padding length and the ciphertext size, which makes it easier for remote attackers to recover partial plaintext via a timing side-channel attack, a related issue to CVE-2011-4108.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.23% | 0.65 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:P/I:N/A:N
|
http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00001.html
http://secunia.com/advisories/57260
http://www.isg.rhul.ac.uk/~kp/dtls.pdf