CVE-2024-28834
Gnutls: vulnerable to minerva side-channel information leak
At a glance
- Severity
- MEDIUM 5.3
- EPSS
- EPSS 0.72 % · percentile 54 (2026-10-27)
- State
- PUBLISHED
- Published
- Updated
- Assigner
- redhat
- NVD status
- Deferred
Description
A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such as when using the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag, it can result in a noticeable step in nonce size from 513 to 512 bits, exposing a potential timing side-channel.
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 5.3 | CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N | redhat |
| CVSS 3.1 | MEDIUM 5.3 | CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N | NVD · secalert@redhat.com (Secondary) |
Weaknesses (CWE)
European references
- ENISA EUVD · EUVD-2024-25920
- GCVE · GCVE-0-2024-28834
CERT-FR advisories
- CERTFR-2026-AVI-1385 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0218 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
- CERTFR-2025-AVI-0969 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
- CERTFR-2025-AVI-0864 — Multiples vulnérabilités dans VMware Tanzu · cert.ssi.gouv.fr
- CERTFR-2025-AVI-0756 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
- CERTFR-2025-AVI-0018 — Multiples vulnérabilités dans les produits Juniper Networks · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0958 — Multiples vulnérabilités dans les produits IBM · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0741 — Multiples vulnérabilités dans Juniper Secure Analytics · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0630 — Multiples vulnérabilités dans IBM QRadar · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0579 — Multiples vulnérabilités dans les produits IBM · cert.ssi.gouv.fr
Affected products
| Product | Versions |
|---|---|
| gnutls | affected 3.7.6-23 |
| Red Hat · Red Hat Enterprise Linux 8 | unaffected 0:3.6.16-8.el8_9.3 < * |
| Red Hat · Red Hat Enterprise Linux 8 | unaffected 0:3.6.16-8.el8_9.3 < * |
| Red Hat · Red Hat Enterprise Linux 8.6 Extended Update Support | unaffected 0:3.6.16-5.el8_6.4 < * |
| Red Hat · Red Hat Enterprise Linux 8.8 Extended Update Support | unaffected 0:3.6.16-7.el8_8.3 < * |
| Red Hat · Red Hat Enterprise Linux 9 | unaffected 0:3.7.6-23.el9_3.4 < * |
| Red Hat · Red Hat Enterprise Linux 9 | unaffected 0:3.8.3-4.el9_4 < * |
| Red Hat · Red Hat Enterprise Linux 9 | unaffected 0:3.7.6-23.el9_3.4 < * |
| Red Hat · Red Hat Enterprise Linux 9 | unaffected 0:3.8.3-4.el9_4 < * |
| Red Hat · Red Hat Enterprise Linux 9.2 Extended Update Support | unaffected 0:3.7.6-21.el9_2.3 < * |
| Red Hat · Red Hat Enterprise Linux 10 | |
| Red Hat · Red Hat Enterprise Linux 6 | |
| Red Hat · Red Hat Enterprise Linux 7 |
References
- https://access.redhat.com/errata/RHSA-2024:1784
- https://access.redhat.com/errata/RHSA-2024:1879
- https://access.redhat.com/errata/RHSA-2024:1997
- https://access.redhat.com/errata/RHSA-2024:2044
- https://access.redhat.com/errata/RHSA-2024:2570
- https://access.redhat.com/errata/RHSA-2024:2889
- https://access.redhat.com/security/cve/CVE-2024-28834
- https://bugzilla.redhat.com/show_bug.cgi?id=2269228
- https://lists.gnupg.org/pipermail/gnutls-help/2024-March/004845.html
- https://minerva.crocs.fi.muni.cz/
- http://www.openwall.com/lists/oss-security/2024/03/22/1
- http://www.openwall.com/lists/oss-security/2024/03/22/2
- https://people.redhat.com/~hkario/marvin/
- https://security.netapp.com/advisory/ntap-20240524-0004/
- https://lists.debian.org/debian-lts-announce/2024/09/msg00019.html
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |