HMAC-SHA-384 Vulnerability in GnuTLS Allows Remote Timing Attacks

CVE-2018-10845

What is CVE-2018-10845?

A vulnerability exists in the GnuTLS implementation of HMAC-SHA-384 which is susceptible to a Lucky thirteen style attack. This flaw can potentially allow remote attackers to exploit timing data analysis to conduct distinguishing attacks and gain access to plaintext through statistical analysis of crafted packets. Organizations using GnuTLS should ensure they are running the updated versions that address this vulnerability. Awareness and timely updates are crucial for maintaining the security integrity of affected systems.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References