Security Advisory
CVE-2018-10845
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
It was found that the GnuTLS implementation of HMAC-SHA-384 was vulnerable to a Lucky thirteen style attack. Remote attackers could use this flaw to conduct distinguishing attacks and plain text recovery attacks via statistical analysis of timing data using crafted packets.