CVE-2018-10846

Name of the Vulnerable Software and Affected Versions GnuTLS (affected versions not specified)

Description A cache-based side channel in the GnuTLS implementation allows for plain text recovery in a cross-VM attack setting. An attacker can use a combination of "Just in Time" Prime+probe attack and Lucky-13 attack with crafted packets to recover plain text.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.