CVE-2020-13777
HIGHGnuTLS 3.6.4-3.6.13 - Use of a Broken or Risky Cryptographic Algorithm in Session Ticket Encryption
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2020-13777. PoCs published by 0xxon, shigeki, prprhyt.
AI-analyzed exploit summary This is a Zeek script designed to detect servers potentially vulnerable to CVE-2020-13777 by analyzing session tickets for suspicious patterns. It logs notices when a vulnerable server or successful session resumption is detected.
Description
GnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of confidentiality in TLS 1.2, and an authentication bypass in TLS 1.3). The earliest affected version is 3.6.4 (2018-09-24) because of an error in a 2018-09-18 commit. Until the first key rotation, the TLS server always uses wrong data in place of an encryption key derived from an application.
Exploits (3)
This is a Zeek script designed to detect servers potentially vulnerable to CVE-2020-13777 by analyzing session tickets for suspicious patterns. It logs notices when a vulnerable server or successful session resumption is detected.
This repository provides a challenge to prove TLS 1.3 MITM and decrypt 0-RTT early data, referencing CVE-2020-13777 in GnuTLS. It includes a pcap file and references external resources for details.
This PoC demonstrates the exploitation of CVE-2020-13777, a vulnerability in GnuTLS related to TLS 1.3 reconnection. It parses pcap files offline to verify the vulnerability without attacking real servers.
References (10)
Scores
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N