PT-2022-17018 · Mellium · Mellium

Travis Burtrum · Published 2022-02-11 · Updated 2022-08-22 · CVE-2022-24968

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Mellium mellium.im/xmpp versions 0.21.0 and earlier

Description An attacker capable of spoofing DNS TXT records can redirect a WebSocket connection request to a server under their control without causing TLS certificate verification to fail. This occurs because the wrong host name is selected during this verification. The issue allows for man-in-the-middle attacks via DNS spoofing, where the server TLS certificate is incorrectly validated using the name of the server returned by the TXT record request, not the name of the server being connected to.

Recommendations For Mellium mellium.im/xmpp versions 0.21.0 and earlier, providing a tls.Config with a ServerName field set to the correct destination hostname will avoid this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

CVE-2022-24968

GHSA-H289-X5WC-XCV8

GHSA-M658-P24X-P74R

GO-2021-0321

GO-2022-0370

GO-2022-0947

Affected Products

Mellium

References · 20

• https://mellium.im/cve/cve-2022-24968 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-m658-p24x-p74r · Vendor Advisory
• https://osv.dev/vulnerability/GO-2022-0370 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-24968 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2021-0321 · Vendor Advisory
• https://mellium.im/xmpp · Vendor Advisory
• https://osv.dev/vulnerability/GO-2022-0947 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-24968 · Security Note
• https://osv.dev/vulnerability/GHSA-h289-x5wc-xcv8 · Vendor Advisory
• https://github.com/mellium/xmpp · Note
• https://github.com/mellium/xmpp/commit/0d92aa486da69b71f2f4a30e62aa722c711b98ac · Note
• https://github.com/mellium/xmpp/pull/260 · Note
• https://github.com/mellium/xmpp/security/advisories/GHSA-h289-x5wc-xcv8 · Note
• https://codeberg.org/mellium/xmpp/commit/0d92aa486da69b71f2f4a30e62aa722c711b98ac · Note
• https://t.me/cvenotify/31154 · Telegram Post