PT-2021-21346 · Telegram+1 · Telegram+1

Igors Stepanovs + 3 · Published 2021-07-16 · Updated 2023-08-08 · CVE-2021-36769

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Telegram versions prior to 7.8.1 for Android Telegram versions prior to 7.8.3 for iOS Telegram Desktop versions prior to 2.8.8

Description A reordering issue exists in Telegram, allowing an attacker to cause the server to receive messages in a different order than they were sent to the client. This issue can be exploited by an attacker, potentially leading to unintended consequences.

Recommendations For Telegram versions prior to 7.8.1 for Android, update to version 7.8.1 or later. For Telegram versions prior to 7.8.3 for iOS, update to version 7.8.3 or later. For Telegram Desktop versions prior to 2.8.8, update to version 2.8.8 or later.

Fix

Related Identifiers

ALT-PU-2021-2271

CVE-2021-36769

Affected Products

Alt Linux

Telegram

References · 10

• https://security-tracker.debian.org/tracker/CVE-2021-36769 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-36769 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-36769 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-36769 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-36769 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-36769 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-36769 · Security Note
• https://t.me/cibsecurity/26237 · Telegram Post
• https://t.me/cvenotify/18294 · Telegram Post
• https://mtpsym.github.io · Note