CVE-2024-28834: Gnutls: vulnerable to minerva side-channel information leak

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-03-21 · updated 2026-10-22
Weakness: CWE-327

Description

A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such as when using the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag, it can result in a noticeable step in nonce size from 513 to 512 bits, exposing a potential timing side-channel.

Affected products

Red Hat Enterprise Linux 8: all versions — fixed in 0:3.6.16-8.el8_9.3
Red Hat Enterprise Linux 8.6 Extended Update Support: all versions — fixed in 0:3.6.16-5.el8_6.4
Red Hat Enterprise Linux 8.8 Extended Update Support: all versions — fixed in 0:3.6.16-7.el8_8.3
Red Hat Enterprise Linux 9: all versions — fixed in 0:3.7.6-23.el9_3.4, 0:3.8.3-4.el9_4
Red Hat Enterprise Linux 9.2 Extended Update Support: all versions — fixed in 0:3.7.6-21.el9_2.3

How to fix

Upgrade to a fixed version: Red Hat Enterprise Linux 8 0:3.6.16-8.el8_9.3; Red Hat Enterprise Linux 8.6 Extended Update Support 0:3.6.16-5.el8_6.4; Red Hat Enterprise Linux 8.8 Extended Update Support 0:3.6.16-7.el8_8.3; Red Hat Enterprise Linux 9 0:3.7.6-23.el9_3.4, 0:3.8.3-4.el9_4; Red Hat Enterprise Linux 9.2 Extended Update Support 0:3.7.6-21.el9_2.3. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2024-28834 or the next vulnerability affects your stack