PT-2018-9330 · Tlslite Ng · Tlslite-Ng

Carnil · Publicado 2018-04-18 · Atualizado 2020-08-24 · CVE-2018-1000159

Positive Technologies (AI Summary)

CVSS v4.0

8.2

Alta

Vetor base

AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions tlslite-ng versions 0.7.3 and earlier

Description The issue is related to an improper validation of integrity check value in the TLS implementation. Specifically, the ct check cbc mac and pad() function in tlslite/utils/constanttime.py contains a vulnerability. This can result in an attacker manipulating the TLS ciphertext without being detected by the receiving tlslite-ng. The attack appears to be exploitable via a man-in-the-middle attack on a network connection.

Recommendations For tlslite-ng versions 0.7.3 and earlier, consider updating to a version that includes the fix after commit 3674815d1b0f7484454995e2737a352e0a6a93d8 to resolve the issue. As a temporary workaround, consider restricting access to the ct check cbc mac and pad() function in tlslite/utils/constanttime.py to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-354

Identificadores relacionados

CVE-2018-1000159

GHSA-CWH5-3CW7-4286

PYSEC-2018-31

Produtos afetados

Tlslite-Ng

Referências · 16

• https://github.com/pypa/advisory-database/tree/main/vulns/tlslite-ng/PYSEC-2018-31.yaml · Nota
• https://github.com/tlsfuzzer/tlslite-ng/commit/d7b288316bca7bcdd082e6ccff5491e241305233 · Nota
• https://github.com/tlsfuzzer/tlslite-ng/pull/234/commits/3674815d1b0f7484454995e2737a352e0a6a93d8 · Nota
• https://github.com/tomato42/tlslite-ng · Nota
• https://github.com/tomato42/tlslite-ng/pull/234 · Nota
• https://github.com/tomato42/tlslite-ng/pull/235 · Nota
• https://github.com/tomato42/tlslite-ng/pull/235/commits/e5e9145558f4c1a81071c61c947aa55a52542585 · Nota
• https://github.com/tomato42/tlslite-ng/pull/234/commits/3674815d1b0f7484454995e2737a352e0a6a93d8 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-1000159 · Nota de Segurança
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-1000159 · Aviso do Fabricante
• https://github.com/advisories/GHSA-cwh5-3cw7-4286 · Nota
• https://osv.dev/vulnerability/CVE-2018-1000159 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2018-1000159 · Aviso do Fabricante
• https://osv.dev/vulnerability/PYSEC-2018-31 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2018-1000159 · Nota de Segurança