Bug 1118087 (CVE-2018-16868) - VUL-0: CVE-2018-16868: gnutls: Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification and padding oracle verification
Summary: VUL-0: CVE-2018-16868: gnutls: Bleichenbacher-like side channel leakage in PK...
Status: RESOLVED FIXED
Alias: CVE-2018-16868
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: Other Other
: P3 - Medium : Normal
Target Milestone: ---
Assignee: Vítězslav Čížek
QA Contact: Security Team bot
URL: https://smash.suse.de/issue/220021/
Whiteboard: CVSSv3:SUSE:CVE-2018-16868:5.3:(AV:L/...
Keywords:
Depends on: CVE-2018-16869
Blocks:
  Show dependency treegraph
 
Reported: 2018-12-03 07:25 UTC by Marcus Meissner
Modified: 2024-04-08 13:50 UTC (History)
4 users (show)

See Also:
Found By: Security Response Team
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Marcus Meissner 2018-12-03 07:25:28 UTC
rh#1654929

GnuTLS is vulnerable to Bleichenbacher-like side channel leakage in PKCS#1 1.5 verificati on and padding oracle verification.

References:
https://bugzilla.redhat.com/show_bug.cgi?id=1654929
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-16868
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16868
Comment 1 Marcus Meissner 2018-12-03 07:26:10 UTC
see bug 1117951
Comment 2 Vítězslav Čížek 2018-12-03 15:49:48 UTC
Fixed in the recent GnuTLS 3.6.5:
https://lists.gnupg.org/pipermail/gnutls-help/2018-December/004465.html
Comment 3 Vítězslav Čížek 2019-01-04 15:01:46 UTC
The fix for CVE-2018-16868 fundamentally depends on a new rsa_sec_decrypt() function introduced in the latest nettle release (3.4.1).

The function was backported to SLE-15 in https://build.suse.de/request/show/180032.
It's however not available on older distributions.
Comment 7 Vítězslav Čížek 2019-04-12 12:18:09 UTC
Fixing this requires libnettle 3.4.1 which is only available on SLE-15.

libnettle 3.4.1 introduced secure rsa_sec_decrypt() and hardened the other RSA functions to be side-channel resistant.
Any older libnettle will still leak information about the secret data via its timing and memory access patterns.
Comment 11 Swamp Workflow Management 2019-04-30 19:11:18 UTC
SUSE-SU-2019:1121-1: An update that fixes three vulnerabilities is now available.

Category: security (important)
Bug References: 1118087,1130681,1130682
CVE References: CVE-2018-16868,CVE-2019-3829,CVE-2019-3836
Sources used:
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 (src):    gnutls-3.6.7-6.8.1
SUSE Linux Enterprise Module for Desktop Applications 15 (src):    gnutls-3.6.7-6.8.1
SUSE Linux Enterprise Module for Basesystem 15 (src):    gnutls-3.6.7-6.8.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 12 Swamp Workflow Management 2019-05-08 19:09:16 UTC
openSUSE-SU-2019:1353-1: An update that fixes three vulnerabilities is now available.

Category: security (important)
Bug References: 1118087,1130681,1130682
CVE References: CVE-2018-16868,CVE-2019-3829,CVE-2019-3836
Sources used:
openSUSE Leap 15.0 (src):    gnutls-3.6.7-lp150.9.1
Comment 13 Swamp Workflow Management 2019-05-24 19:34:01 UTC
SUSE-SU-2019:1351-1: An update that solves one vulnerability and has one errata is now available.

Category: security (important)
Bug References: 1118087,1134856
CVE References: CVE-2018-16868
Sources used:
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 (src):    gnutls-3.6.7-6.11.1
SUSE Linux Enterprise Module for Desktop Applications 15 (src):    gnutls-3.6.7-6.11.1
SUSE Linux Enterprise Module for Basesystem 15 (src):    gnutls-3.6.7-6.11.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 14 Swamp Workflow Management 2019-05-30 10:09:52 UTC
openSUSE-SU-2019:1477-1: An update that solves one vulnerability and has one errata is now available.

Category: security (important)
Bug References: 1118087,1134856
CVE References: CVE-2018-16868
Sources used:
openSUSE Leap 15.1 (src):    gnutls-3.6.7-lp151.2.3.1
openSUSE Leap 15.0 (src):    gnutls-3.6.7-lp150.12.1
Comment 15 Swamp Workflow Management 2019-07-01 16:13:32 UTC
SUSE-SU-2019:1351-2: An update that solves one vulnerability and has one errata is now available.

Category: security (important)
Bug References: 1118087,1134856
CVE References: CVE-2018-16868
Sources used:
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1 (src):    gnutls-3.6.7-6.11.1
SUSE Linux Enterprise Module for Basesystem 15-SP1 (src):    gnutls-3.6.7-6.11.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 16 Vítězslav Čížek 2020-07-02 14:34:28 UTC
We're not currently planning to fix this vulnerability on SLE-12 and older distributions.
The gnutls fix requires new functionality in libnettle (see comment 7), which is however hard to backport to SLE-12 (bug 1118086 comment 13).