Lucene search
UbuntuUSN-6489-1HistoryNov 20, 2023 - 12:00 a.m.
Tang vulnerability
2023-11-2000:00:00
ubuntu.com
19
tang
ubuntu
vulnerability
local attacker
keys
permissions
cryptographic binding
CVSS3
5.3
Attack Vector
ADJACENT
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
5.2
Confidence
High
EPSS
0.001
Percentile
27.7%
Releases
- Ubuntu 23.04
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 ESM
Packages
- tang - network-based cryptographic binding server
Details
Brian McDermott discovered that Tang incorrectly handled permissions when
creating/rotating keys. A local attacker could possibly use this issue to
read the keys.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 23.04 | noarch | tang-common | < 11-2ubuntu0.1 | UNKNOWN |
| Ubuntu | 23.04 | noarch | tang | < 11-2ubuntu0.1 | UNKNOWN |
| Ubuntu | 23.04 | noarch | tang-common-dbgsym | < 11-2ubuntu0.1 | UNKNOWN |
| Ubuntu | 23.04 | noarch | tang-xinetd | < 11-2ubuntu0.1 | UNKNOWN |
| Ubuntu | 22.04 | noarch | tang-common | < 11-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 22.04 | noarch | tang | < 11-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 22.04 | noarch | tang-common-dbgsym | < 11-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 22.04 | noarch | tang-xinetd | < 11-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 20.04 | noarch | tang | < 7-1ubuntu0.2 | UNKNOWN |
| Ubuntu | 20.04 | noarch | tang-dbgsym | < 7-1ubuntu0.2 | UNKNOWN |
References
Related
openvas
openvas
Fedora: Security Advisory for tang (FEDORA-2023-3e84bba241)
2023-06-24 00:00:00
Debian: Security Advisory (DLA-3648-1)
2023-11-08 00:00:00
Fedora: Security Advisory for tang (FEDORA-2023-eb9bec6e8c)
2023-06-24 00:00:00
nessus
nessus
RHEL 7 : tang (Unpatched Vulnerability)
2024-05-11 00:00:00
RHEL 8 : tang (RHSA-2023:7022)
2023-11-14 00:00:00
fedora
fedora
[SECURITY] Fedora 38 Update: tang-14-1.fc38
2023-06-23 01:02:09
[SECURITY] Fedora 37 Update: tang-14-1.fc37
2023-06-23 01:01:11
prion
prion
Race condition
2023-07-11 12:15:00
ubuntucve
ubuntucve
CVE-2023-1672
2023-07-11 00:00:00
oraclelinux
oraclelinux
tang security and bug fix update
2023-11-17 00:00:00
tang security update
2023-11-11 00:00:00
osv
osv
CVE-2023-1672
2023-07-11 12:15:09
tang vulnerability
2023-11-20 16:04:07
Moderate: tang security and bug fix update
2023-11-14 00:00:00
redhatcve
redhatcve
CVE-2023-1672
2023-06-15 14:14:49
redhat
redhat
(RHSA-2023:6492) Moderate: tang security update
2023-11-07 06:06:52
(RHSA-2023:7022) Moderate: tang security and bug fix update
2023-11-14 08:43:15
nvd
nvd
CVE-2023-1672
2023-07-11 12:15:09
almalinux
almalinux
Moderate: tang security and bug fix update
2023-11-14 00:00:00
Moderate: tang security update
2023-11-07 00:00:00
debian
debian
[SECURITY] [DLA 3648-1] tang security update
2023-11-07 20:00:35
cvelist
cvelist
cbl_mariner
cbl_mariner
CVE-2023-1672 affecting package tang for versions less than 14-1
2023-09-28 11:57:58
veracode
veracode
Race Condition
2023-08-06 05:36:13
rosalinux
rosalinux
Advisory ROSA-SA-2023-2295
2023-11-14 13:49:38
debiancve
debiancve
CVE-2023-1672
2023-07-11 12:15:09
cve
cve
CVE-2023-1672
2023-07-11 12:15:09
CVSS3
5.3
Attack Vector
ADJACENT
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
5.2
Confidence
High
EPSS
0.001
Percentile
27.7%
Related for USN-6489-1