CVE-2024-0553 json
Gnutls: incomplete fix for cve-2023-5981
published 2024-01-16 2 y ago modified 2026-11-05 3 d ago also EUVD-2024-16346 , JLSEC-2026-525
- cvss
- 7.5
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 1.6%
- EPSS 1.6% chance of exploitation in 30 days, percentile 76%
- public exploits
- 0
- none known
Summary
A vulnerability was found in GnuTLS. The response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from the response times of ciphertexts with correct PKCS#1 v1.5 padding. This issue may allow a remote attacker to perform a timing side-channel attack in the RSA-PSK key exchange, potentially leading to the leakage of sensitive data. CVE-2024-0553 is designated as an incomplete resolution for CVE-2023-5981.
Patch / fix
- julia GnuTLS_jll 3.8.3+0
- Red Hat Red Hat Enterprise Linux 8 0:3.6.16-8.el8_9.1
- Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support 0:3.6.16-5.el8_6.3
- Red Hat Red Hat Enterprise Linux 8.8 Extended Update Support 0:3.6.16-7.el8_8.2
- Red Hat Red Hat Enterprise Linux 9 0:3.7.6-23.el9_3.3
- Red Hat Red Hat Enterprise Linux 9.2 Extended Update Support 0:3.7.6-21.el9_2.2
- Red Hat RHODF-4.15-RHEL-9 v4.15.0-6, v4.15.0-10, v4.15.0-13, v4.15.0-15, v4.15.0-19, v4.15.0-21, v4.15.0-22, v4.15.0-26, v4.15.0-37, v4.15.0-39, v4.15.0-54, v4.15.0-57, v4.15.0-58, v4.15.0-68, v4.15.0-79, v4.15.0-81, v4.15.0-103, v4.15.0-158
- Red Hat RHOL-5.8-RHEL-9 v0.1.0-224, v0.1.0-525, v0.4.0-247, v0.28.1-56, v1.0.0-479, v1.1.0-227, v2.9.6-14, v5.8.1-470, v5.8.6-2, v5.8.6-5, v5.8.6-7, v5.8.6-10, v5.8.6-11, v5.8.6-19, v5.8.6-22, v5.8.6-24, v6.8.1-407
- Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem V1.1
- gnutls28 Debian 12 3.7.9-2+deb12u2
- gnutls28 Debian 14, Debian 13 3.8.3-1
debian advisories DEBIAN-CVE-2024-0553
- gnutls28 Ubuntu 20.04 LTS 3.6.13-2ubuntu1.10
- gnutls28 Ubuntu 22.04 LTS 3.7.3-4ubuntu1.4
- gnutls28 Ubuntu 24.04 LTS 3.8.3-1ubuntu1
- gnutls28 Ubuntu Pro 18.04 LTS 3.5.18-1ubuntu1.6+esm3
ubuntu advisories UBUNTU-CVE-2024-0553
Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0
- gnutls RHEL 9 3.7.6-23.el9_3.3
- gnutls-c++ RHEL 9 3.7.6-23.el9_3.3
- gnutls-dane RHEL 9 3.7.6-23.el9_3.3
- gnutls-utils RHEL 9 3.7.6-23.el9_3.3
- gnutls RHEL 8 3.6.16-8.el8_9.1
- gnutls-c++ RHEL 8 3.6.16-8.el8_9.1
- gnutls-dane RHEL 8 3.6.16-8.el8_9.1
- gnutls-utils RHEL 8 3.6.16-8.el8_9.1
red hat advisories RHSA-2024:1108RHSA-2024:1082RHSA-2024:0533RHSA-2024:0796RHSA-2024:0627
- gnutls SLE Module for Basesystem 15 SP5, SLE Micro 5.5, SLE Micro 5.4 +8 more 3.7.3-150400.4.41.3
- gnutls SLE Micro 5.3 3.7.3-150400.1.3.1
- gnutls SLES for SAP 15 SP3, SLES for SAP 15 SP2, SLES 15 SP3-LTSS +6 more 3.6.7-150200.14.31.1
suse advisories SUSE-SU-2024:0638-2SUSE-SU-2024:1179-1SUSE-SU-2024:0860-1SUSE-SU-2024:0638-1
- gnutls openSUSE Tumbleweed 3.8.3-1.1
opensuse advisories openSUSE-SU-2024:13593-1
- gnutls AlmaLinux 8 3.6.16-8.el8_9.1
- gnutls-c++ AlmaLinux 8 3.6.16-8.el8_9.1
- gnutls-dane AlmaLinux 8 3.6.16-8.el8_9.1
- gnutls-utils AlmaLinux 8 3.6.16-8.el8_9.1
- gnutls AlmaLinux 9 3.7.6-23.el9_3.3
- gnutls-c++ AlmaLinux 9 3.7.6-23.el9_3.3
- gnutls-dane AlmaLinux 9 3.7.6-23.el9_3.3
- gnutls-utils AlmaLinux 9 3.7.6-23.el9_3.3
almalinux advisories ALSA-2024:0627ALSA-2024:0533
- gnutls Rocky Linux 8 3.6.16-8.el8_9.1
rocky linux advisories RLSA-2024:0627
- gnutls Alpine 3.24, Alpine 3.23, Alpine 3.22 +4 more 3.8.3-r0
alpine advisories ALPINE-CVE-2024-0553
Alpine secdb © Alpine Linux, from https://secdb.alpinelinux.org via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0
- gnutls CBL-Mariner 2.0 3.7.11-1
- gnutls Azure Linux 3.0 3.8.3-1
azure linux advisories AZL-33341AZL-34739
Azure Linux vulnerability data, Copyright (c) Microsoft Corporation, from https://github.com/microsoft/AzureLinuxVulnerabilityData via OSV, under the MIT licence; changed: normalised to fixed package versions per release. MIT
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2024-0553 updated cvss 7.5
gnutls: incomplete fix for CVE-2023-5981
-
Red Hat Enterprise Linux 6 gnutls, gnutls-guile, gnutls-utils Red Hat Enterprise Linux 7 gnutls, gnutls-c++, gnutls-dane, gnutls-utilsaffected: workaround, no fix planned “Out of support scope”
-
Red Hat Enterprise Linux AppStream (v. 8) gnutls-c++ 3.6.16-8.el8_9.1, gnutls-dane 3.6.16-8.el8_9.1, gnutls-utils 3.6.16-8.el8_9.1fixed: vendor fix RHSA-2024:0627
-
Red Hat Enterprise Linux AppStream (v. 9) gnutls-c++ 3.7.6-23.el9_3.3, gnutls-dane 3.7.6-23.el9_3.3, gnutls-utils 3.7.6-23.el9_3.3fixed: vendor fix RHSA-2024:0533
-
Red Hat Enterprise Linux AppStream EUS (v.8.6) gnutls-c++ 3.6.16-5.el8_6.3, gnutls-dane 3.6.16-5.el8_6.3, gnutls-utils 3.6.16-5.el8_6.3fixed: vendor fix RHSA-2024:1108
-
Red Hat Enterprise Linux AppStream EUS (v.8.8) gnutls-c++ 3.6.16-7.el8_8.2, gnutls-dane 3.6.16-7.el8_8.2, gnutls-utils 3.6.16-7.el8_8.2fixed: vendor fix RHSA-2024:0796
-
Red Hat Enterprise Linux AppStream EUS (v.9.2) gnutls-c++ 3.7.6-21.el9_2.2, gnutls-dane 3.7.6-21.el9_2.2, gnutls-utils 3.7.6-21.el9_2.2fixed: vendor fix RHSA-2024:1082
-
Red Hat Enterprise Linux BaseOS (v. 8) gnutls 3.6.16-8.el8_9.1fixed: vendor fix RHSA-2024:0627
-
Red Hat Enterprise Linux BaseOS (v. 9) gnutls 3.7.6-23.el9_3.3fixed: vendor fix RHSA-2024:0533
show 5 moreshow fewer
-
Red Hat Enterprise Linux BaseOS EUS (v.8.6) gnutls 3.6.16-5.el8_6.3fixed: vendor fix RHSA-2024:1108
-
Red Hat Enterprise Linux BaseOS EUS (v.8.8) gnutls 3.6.16-7.el8_8.2fixed: vendor fix RHSA-2024:0796
-
Red Hat Enterprise Linux BaseOS EUS (v.9.2) gnutls 3.7.6-21.el9_2.2fixed: vendor fix RHSA-2024:1082
-
Red Hat RHODF 4.15 for RHEL 9 odf4/cephcsi-rhel9 v4.15.0-37, odf4/odf-cli-rhel9 v4.15.0-22, odf4/mcg-core-rhel9 v4.15.0-68, odf4/odf-console-rhel9 v4.15.0-57, odf4/mcg-rhel9-operator v4.15.0-39, odf4/ocs-rhel9-operator v4.15.0-79, +20 morefixed: vendor fix RHSA-2024:1383
-
Red Hat RHOL 5.8 for RHEL 9 openshift-logging/fluentd-rhel9 v5.8.6-5, openshift-logging/vector-rhel9 v0.28.1-56, openshift-logging/eventrouter-rhel9 v0.4.0-247, openshift-logging/logging-loki-rhel9 v2.9.6-14, openshift-logging/loki-rhel9-operator v5.8.6-10, openshift-logging/loki-operator-bundle v5.8.6-24, +11 morefixed: vendor fix RHSA-2024:2094
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
cisa ICSA-23-166-11 updated cvss 7.5
Siemens SIMATIC S7-1500 TM MFP Linux Kernel
-
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem <V1.1affected: fixed in V1.1, workaround support.industry.siemens.com
Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf
CISA SSVC
- Exploitation
- none
- Automatable
- yes
- Technical impact
- partial
- Assessed
- 2 y ago
Exploit prediction
1.61% chance of exploitation in the next 30 days, higher than 76% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- gitlab.com https://gitlab.com/gnutls/gnutls/-/issues/1522 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| NVD | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| OSV | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| julia | GnuTLS_jll | <3.8.3+0 |
3.8.3+0 |
Affected products
- Red Hat Red Hat Enterprise Linux 8
- Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support
- Red Hat Red Hat Enterprise Linux 8.8 Extended Update Support
- Red Hat Red Hat Enterprise Linux 9
- Red Hat Red Hat Enterprise Linux 9.2 Extended Update Support
- Red Hat RHODF-4.15-RHEL-9
- Red Hat RHOL-5.8-RHEL-9
- Red Hat Red Hat Enterprise Linux 6
- Red Hat Red Hat Enterprise Linux 7
- Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem
Classification
- Weakness
-
- CWE-203 Observable Discrepancy
References
-
gitlab.com
/gnutls/gnutls/-/issues/1522
exploit, issue-tracking, vendor-advisory, web
-
access.redhat.com
/errata/RHSA-2024:0533
vendor-advisory, web
-
access.redhat.com
/errata/RHSA-2024:0627
vendor-advisory, web
-
access.redhat.com
/errata/RHSA-2024:0796
vendor-advisory, web
-
access.redhat.com
/errata/RHSA-2024:1082
vendor-advisory, web
-
access.redhat.com
/errata/RHSA-2024:1108
vendor-advisory, web
-
access.redhat.com
/errata/RHSA-2024:1383
vendor-advisory, web
-
access.redhat.com
/errata/RHSA-2024:2094
vendor-advisory, web
-
access.redhat.com
/security/cve/CVE-2024-0553
vdb-entry, third-party-advisory, web
-
bugzilla.redhat.com
/show_bug.cgi?id=2258412
issue-tracking, third-party-advisory, web
-
lists.gnupg.org
/pipermail/gnutls-help/2024-January/004841.html
mailing-list, web
-
openwall.com
/lists/oss-security/2024/01/19/3
web
-
lists.debian.org
/debian-lts-announce/2024/02/msg00010.html
web
-
lists.fedoraproject.org
/archives/list/package-announce@lists.fedoraproject.org/message/7ZEIOLORQ7N6WRPFXZSYDL2MC4LP7VFV/
web
-
lists.fedoraproject.org
/archives/list/package-announce@lists.fedoraproject.org/message/GNXKVR5YNUEBNHAHM5GSYKBZX4W2HMN2/
web
-
security.netapp.com
/advisory/ntap-20240202-0011/
web
- cert-portal.siemens.com /productcert/html/ssa-794697.html
Sources
- CVE List CVE-2024-0553
- NVD CVE-2024-0553
- OSV JLSEC-2026-525
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.