CVE-2018-10845

MediumCVSS 5.9/10Last modified Jun 17, 2026

Description

It was found that the GnuTLS implementation of HMAC-SHA-384 was vulnerable to a Lucky thirteen style attack. Remote attackers could use this flaw to conduct distinguishing attacks and plain text recovery attacks via statistical analysis of timing data using crafted packets.

Metrics

CVSS 3.1 5.9/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-385 CWE-327

Affected software

Vendor	Product	Versions
[UNKNOWN]	gnutls	n/a

References

http://www.securityfocus.com/bid/105138Third Party Advisory, VDB Entry
https://access.redhat.com/errata/RHSA-2018:3050Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3505Broken Link
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10845Issue Tracking, Patch, Third Party Advisory
https://eprint.iacr.org/2018/747Third Party Advisory
https://gitlab.com/gnutls/gnutls/merge_requests/657Patch, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2018/10/msg00022.htmlThird Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ILMOWPKMTZAIMK5F32TUMO34XCABUCFJ/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WDYY3R4F5CUTFAMXH2C5NKYFVDEJLTT7/
https://usn.ubuntu.com/3999-1/Third Party Advisory
http://www.securityfocus.com/bid/105138Third Party Advisory, VDB Entry
https://access.redhat.com/errata/RHSA-2018:3050Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3505Broken Link
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10845Issue Tracking, Patch, Third Party Advisory
https://eprint.iacr.org/2018/747Third Party Advisory
https://gitlab.com/gnutls/gnutls/merge_requests/657Patch, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2018/10/msg00022.htmlThird Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ILMOWPKMTZAIMK5F32TUMO34XCABUCFJ/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WDYY3R4F5CUTFAMXH2C5NKYFVDEJLTT7/
https://usn.ubuntu.com/3999-1/Third Party Advisory

Timeline

Published: Aug 22, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-108465.6A cache-based side channel in GnuTLS implementation that leads to plain text recovery in cross-VM attack setting was found. An attacker coul CVE-2018-108478.8prosody before versions 0.10.2, 0.9.14 is vulnerable to an Authentication Bypass. Prosody did not verify that the virtual host associated wi CVE-2018-10859.8openshift-ansible before versions 3.9.23, 3.7.46 deploys a misconfigured etcd file that causes the SSL client certificate authentication to CVE-2018-108505.9389-ds-base before versions 1.4.0.10, 1.3.8.3 is vulnerable to a race condition in the way 389-ds-base handles persistent search, resulting CVE-2018-108517.5PowerDNS Authoritative Server 3.3.0 up to 4.1.4 excluding 4.1.5 and 4.0.6, and PowerDNS Recursor 3.2 up to 4.1.4 excluding 4.1.5 and 4.0.9, CVE-2018-108527.5The UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD has too wide permissions, which means that anyone CVE-2018-108537.8A flaw was found in the way Linux kernel KVM hypervisor before 4.18 emulated instructions such as sgdt/sidt/fxsave/fxrstor. It did not check CVE-2018-108545.4cloudforms version, cloudforms 5.8 and cloudforms 5.9, is vulnerable to a cross-site-scripting. A flaw was found in CloudForms's v2v infrast CVE-2018-108555.9Ansible 2.5 prior to 2.5.5, and 2.4 prior to 2.4.5, do not honor the no_log task flag for failed tasks. When the no_log flag has been used t CVE-2018-108568.8It has been discovered that podman before version 0.6.1 does not drop capabilities when executing a container as a non-root user. This resul CVE-2018-108577.5git-annex is vulnerable to a private data exposure and exfiltration attack. It could expose the content of files located outside the git-ann CVE-2018-108588.8A heap-buffer overflow was found in the way samba clients processed extra long filename in a directory listing. A malicious samba server cou