| Package | Affected versions | Patched versions |
|---|---|---|
| gnutls | < 3.6.12 | 3.6.12 |
A cache-based side channel in GnuTLS implementation that leads to plain text recovery in cross-VM attack setting was found. An attacker could use a combination of "Just in Time" Prime+probe attack in combination with Lucky-13 attack to recover plain text using crafted packets.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free