Lucene search
Ubuntu.comUB:CVE-2023-1672HistoryJul 11, 2023 - 12:00 a.m.
CVE-2023-1672
2023-07-1100:00:00
ubuntu.com
ubuntu.com
12
tang server
race condition
key generation
key rotation
private keys
security flaw
5.3 Medium
CVSS3
Attack Vector
ADJACENT
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
20.8%
A race condition exists in the Tang server functionality for key generation
and key rotation. This flaw results in a small time window where Tang
private keys become readable by other processes on the same host.
Notes
| Author | Note |
|---|---|
| alexmurray | For tang 6 and 7 in bionic and focal respectively, the code from src/keys.c and src/tangd-rotate-keys.in is not present, however there is an equivalent src/tangd-keygen script which looks like it needs to be updated to set the umask correctly |
Related
cbl_mariner
cbl_mariner
CVE-2023-1672 affecting package tang for versions less than 14-1
2023-09-28 11:57:58
osv
osv
Moderate: tang security and bug fix update
2023-11-14 00:00:00
tang vulnerability
2023-11-20 16:04:07
CVE-2023-1672
2023-07-11 12:15:09
nessus
nessus
Fedora 37 : tang (2023-eb9bec6e8c)
2023-06-23 00:00:00
CentOS 8 : tang (CESA-2023:7022)
2023-11-14 00:00:00
RHEL 7 : tang (Unpatched Vulnerability)
2024-05-11 00:00:00
almalinux
almalinux
Moderate: tang security update
2023-11-07 00:00:00
Moderate: tang security and bug fix update
2023-11-14 00:00:00
cvelist
cvelist
fedora
fedora
[SECURITY] Fedora 38 Update: tang-14-1.fc38
2023-06-23 01:02:09
[SECURITY] Fedora 37 Update: tang-14-1.fc37
2023-06-23 01:01:11
prion
prion
Race condition
2023-07-11 12:15:00
openvas
openvas
Fedora: Security Advisory for tang (FEDORA-2023-3e84bba241)
2023-06-24 00:00:00
Debian: Security Advisory (DLA-3648-1)
2023-11-08 00:00:00
Fedora: Security Advisory for tang (FEDORA-2023-eb9bec6e8c)
2023-06-24 00:00:00
debian
debian
[SECURITY] [DLA 3648-1] tang security update
2023-11-07 20:00:35
nvd
nvd
CVE-2023-1672
2023-07-11 12:15:09
ubuntu
ubuntu
Tang vulnerability
2023-11-20 00:00:00
redhatcve
redhatcve
CVE-2023-1672
2023-06-15 14:14:49
redhat
redhat
(RHSA-2023:7022) Moderate: tang security and bug fix update
2023-11-14 08:43:15
(RHSA-2023:6492) Moderate: tang security update
2023-11-07 06:06:52
oraclelinux
oraclelinux
tang security and bug fix update
2023-11-17 00:00:00
tang security update
2023-11-11 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2295
2023-11-14 13:49:38
veracode
veracode
Race Condition
2023-08-06 05:36:13
cve
cve
CVE-2023-1672
2023-07-11 12:15:09
debiancve
debiancve
CVE-2023-1672
2023-07-11 12:15:09
5.3 Medium
CVSS3
Attack Vector
ADJACENT
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
20.8%
Related for UB:CVE-2023-1672