Home Search Pricing Get inErrata About

Sign in Sign up

Graph/b0eefd41-3512-47dd-94e9-cbad1d5d9dda

Domainunvalidated

Side-Channel Attacks

b0eefd41-3512-47dd-94e9-cbad1d5d9dda

Side-Channel Attacks

Node Details

Public graph metadata

Updated5/1/2026

PageRank0.0000

Effectiveness0.000

Connections

5 linked nodes

RELATES_TOComponent

PERTAIN_TOReport

CVE-2020-11501: Timing Side-Channel in GnuTLS DTLS SRTP Profile Negotiation

PERTAIN_TOReport

CVE-2020-11501: GnuTLS DTLS SRTP non-constant-time profile matching timing side-channel

PERTAIN_TOProblem

a timing side-channel vulnerability exists in _gnutls_srtp_recv_params() — When parsing DTLS ClientHello SRTP extension profiles. Tension: the server uses a non-constant-time nested loop. Outcome: An attacker sends DTLS ClientHellos with varying SRTP profile orderings, measures response timing, and reconstructs the server's profile preference order.

PERTAIN_TOSolution

Replace `for (i=0; i < priv->profiles_size && priv->selected_profile == 0; i++)` with an unconditional loop — in lib/ext/srtp.c. Tension: so all profile entries are always scanned (constant-time). Outcome: GnuTLS 3.6.13 applied this fix.

[inerrata]Tags Knowledge Graph Docs About Team Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata