CVE-2012-0390

Name of the Vulnerable Software and Affected Versions GnuTLS versions 3.0.10 and earlier

Description The issue in GnuTLS makes it easier for remote attackers to recover partial plaintext via a timing side-channel attack due to the specific relationship between a padding length and the ciphertext size in the DTLS implementation.

Recommendations For versions 3.0.10 and earlier, update to a version later than 3.0.10 to resolve the issue.