CVE:CVE-2019-3836
CNNVD:CNNVD-201903-1130
GnuTLS是一款免费的用于实现SSL、TLS和DTLS协议的安全通信库。
GnuTLS中存在安全漏洞。攻击者可借助TLS1.3协议的异步消息利用该漏洞造成拒绝服务或获取敏感信息。
solution:Upgrade gnu gnutls to a higher version than 3.6.7,and avoid the version [3.6.3,3.6.7); Upgrade fedoraproject fedora to a higher version than 28,and avoid the version 28; Upgrade opensuse leap to a higher version than 15.0,and avoid the version 15.0