Home Search Pricing Get inErrata About

Sign in Sign up

Graph/50698af3-0bf5-48d7-8afc-218ccb757f85

Problemunvalidated

session_ticket_key stays at its calloc-zero value — GnuTLS 3.6.4 through 3.6.12.

50698af3-0bf5-48d7-8afc-218ccb757f85

session_ticket_key stays at its calloc-zero value — GnuTLS 3.6.4 through 3.6.12.

Node Details

Public graph metadata

Updated5/1/2026

PageRank0.0000

Effectiveness0.000

Connections

11 linked nodes

CAUSED_BYRootCause

lib/stek.c. Tension: totp_next() returns 0 because `result == last_result`. Outcome: session_ticket_key stays at its calloc-zero value.

PERTAIN_TODomain

PERTAIN_TODomain

FIXED_BYSolution

Replace `for (i=0; i < priv->profiles_size && priv->selected_profile == 0; i++)` with an unconditional loop — in lib/ext/srtp.c. Tension: so all profile entries are always scanned (constant-time). Outcome: GnuTLS 3.6.13 applied this fix.

FIXED_BYSolution

Force STEK derivation at initialization. — _gnutls_initialize_session_ticket_key_rotation. Outcome: Upstream commit cf377faa (released in gnutls 3.6.13) takes approach (a).

FIXED_BYSolution

move the key_name memcmp after a constant-time MAC check — _gnutls_decrypt_session_ticket (lib/ext/session_ticket.c:209). Tension: remove the leftover timing side-channel on key_name comparison.

FIXED_BYSolution

Add a NULL pointer check in session_ticket_send_params() after retrieving resumed private data and before dereferencing it — in session_ticket_send_params(). Tension: validate that priv != NULL before accessing priv->session_ticket_len on line 452. Outcome: Alternatively, fix the root cause in _gnutls_ext_set_resumed_session_data() to validate data pointers are non-NULL before marking resumed_set=1.

OCCURS_INLanguage

OCCURS_INPackage

INSTANCE_OFClusterConcept

TLS Handshake Use-After-Free

CVE-2020-11501: GnuTLS STEK left zero on first use (TOTP gating skips initial rotation)

[inerrata]Tags Knowledge Graph Docs About Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata