ALPACA is an application layer protocol content confusion attack exploiting TLS servers implementing different protocols but using compatible certificates such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

🗓️ 05 Apr 2022 07:00:00Reported by MicrosoftType

ALPACA is an application layer protocol confusion attack that hijacks TLS sessions using compatible certificates.

Reporter	Title	Published	Views	Family All 156
IBM Security Bulletins	Security Bulletin: IBM Observability with Instana (OnPrem) is affected by multiple security vulnerabilities	30 Aug 202413:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Nginx	3 Aug 202219:30	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability in NGINX ffects IBM Cloud Automation Manager	16 Sep 202118:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Robotic Process Automation for Cloud Pak is vulnerable to cross-protocol attacks due to sendmail (CVE-2021-3618)	31 Jul 202318:46	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Kafka and NGINX affect IBM Spectrum Discover	8 Jan 202217:15	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability in NGINX affects IBM Cloud Pak for Multicloud Management Managed Services	9 Nov 202118:19	–	ibm
ALT Linux	Security fix for the ALT Linux 9 package nginx version 1.22.0-alt1	15 Jul 202200:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package nginx version 1.22.0-alt1	14 Jul 202200:00	–	altlinux
ATTACKERKB	CVE-2021-3618	23 Mar 202220:15	–	attackerkb
Tenable Nessus	Amazon Linux 2022 : sendmail, sendmail-cf, sendmail-milter (ALAS2022-2022-171)	4 Nov 202200:00	–	nessus