CVE-2018-17780

creationtimestamp| type| source ---|---|--- 2018-10-01 17:18:29+00:00| seen| MISP/5bb25688-48c4-4243-9b0a-317a0a021402 2018-10-01 18:09:37+00:00| seen| https://t.me/drussia/5194 2018-10-02 13:47:24+00:00| published-proof-of-concept| https://t.me/alexmakus/2432 2018-10-03 10:05:21+00:00| seen|...

Telegram Calling Feature Leaks Your IP Addresses—Patch Released

The desktop version of the security and privacy-focused, end-to-end encrypted messaging app, Telegram , has been found leaking both users' private and public IP addresses by default during voice calls. With 200 million monthly active users as of March 2018, Telegram promotes itself as an...

CVE-2018-17780

Telegram Desktop aka tdesktop 1.3.14, and Telegram 3.3.0.0 WP8.1 on Windows, leaks end-user public and private IP addresses during a call because of an unsafe default behavior in which P2P connections are accepted from clients outside of the My Contacts list...

CVE-2018-17780

CVE-2018-17780 affects Telegram Desktop (tdesktop) 1.3.14 and Telegram 3.3.0.0 WP8.1 on Windows. The root cause is an unsafe default that accepts P2P connections from outside the user’s My Contacts list, enabling leakage of both public and private IP addresses during calls. The vulnerability is d...