ZeroDay Findings
Sign inSign up

Findings

CVE-2020-13777

GnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of confidentiality in TLS 1.2, and an authentication bypass in TLS 1.3).

Published Jun 4, 2020 · updated Oct 14, 2026 · gnu gnutls

GnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of confidentiality in TLS 1.2, and an authentication bypass in TLS 1.3). The earliest affected version is 3.6.4 (2018-09-24) because of an error in a 2018-09-18 commit. Until the first key rotation, the TLS server always uses wrong data in place of an encryption key derived from an application.

Timeline

Detection, updates, and resolution for this record.

  1. Jun 4, 2020 · NIST NVD

    Detected

    GnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of confidentiality in TLS 1.2, and an authentication bypass in TLS 1.3). The earliest affected version is 3.6.4 (2018-09-24) because of an error in a 2018-09-18 commit. Until the first key rotation, the TLS server always uses wrong data in place of an encryption key derived from an application.

  2. Oct 14, 2026 · NIST NVD

    Updated

    GnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of confidentiality in TLS 1.2, and an authentication bypass in TLS 1.3). The earliest affected version is 3.6.4 (2018-09-24) because of an error in a 2018-09-18 commit. Until the first key rotation, the TLS server always uses wrong data in place of an encryption key derived from an application.

Affected

  • cpe canonical/ubuntu linux19.10
  • cpe canonical/ubuntu linux20.04
  • cpe debian/debian linux10.0
  • cpe fedoraproject/fedora31
  • cpe fedoraproject/fedora32
  • cpe gnu/gnutlsversion unspecified

Sources

  • CVE.orgCVE-2020-13777

    Official CVE identifier

    cve.org
  • NIST NVDCVE-2020-13777

    GnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of confidentiality in TLS 1.2, and an authentication bypass in TLS 1.3). The earliest affected version is 3.6.4 (2018-09-24) because of an error in a 2018-09-18 commit. Until the first

    nvd.nist.gov

References