PT-2018-9330 · Tlslite Ng · Tlslite-Ng

Carnil · Published 2018-04-18 · Updated 2020-08-24 · CVE-2018-1000159

Positive Technologies (AI Summary)

CVSS v4.0

8.2

High

Base vector

AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions tlslite-ng versions 0.7.3 and earlier

Description The issue is related to an improper validation of integrity check value in the TLS implementation. Specifically, the ct check cbc mac and pad() function in tlslite/utils/constanttime.py contains a vulnerability. This can result in an attacker manipulating the TLS ciphertext without being detected by the receiving tlslite-ng. The attack appears to be exploitable via a man-in-the-middle attack on a network connection.

Recommendations For tlslite-ng versions 0.7.3 and earlier, consider updating to a version that includes the fix after commit 3674815d1b0f7484454995e2737a352e0a6a93d8 to resolve the issue. As a temporary workaround, consider restricting access to the ct check cbc mac and pad() function in tlslite/utils/constanttime.py to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-354

Related Identifiers

CVE-2018-1000159

GHSA-CWH5-3CW7-4286

PYSEC-2018-31

Affected Products

Tlslite-Ng

References · 16

• https://nvd.nist.gov/vuln/detail/CVE-2018-1000159 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-1000159 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-1000159 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-1000159 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2018-31 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2018-1000159 · Security Note
• https://osv.dev/vulnerability/GHSA-cwh5-3cw7-4286 · Vendor Advisory
• https://github.com/pypa/advisory-database/tree/main/vulns/tlslite-ng/PYSEC-2018-31.yaml · Note
• https://github.com/tlsfuzzer/tlslite-ng/commit/d7b288316bca7bcdd082e6ccff5491e241305233 · Note
• https://github.com/tlsfuzzer/tlslite-ng/pull/234/commits/3674815d1b0f7484454995e2737a352e0a6a93d8 · Note
• https://github.com/tomato42/tlslite-ng · Note
• https://github.com/tomato42/tlslite-ng/pull/234 · Note
• https://github.com/tomato42/tlslite-ng/pull/235 · Note
• https://github.com/tomato42/tlslite-ng/pull/235/commits/e5e9145558f4c1a81071c61c947aa55a52542585 · Note
• https://github.com/tomato42/tlslite-ng/pull/234/commits/3674815d1b0f7484454995e2737a352e0a6a93d8 · Note