PT-2022-18970 · Weechat+1 · Weechat+1

Nguyenhuy-Hoanganh · Published 2022-04-02 · Updated 2022-04-13 · CVE-2022-28352

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions WeeChat versions 3.2 through 3.4 before 3.4.1

Description The issue arises when certain GnuTLS options are changed without a WeeChat restart, specifically weechat.network.gnutls ca system or weechat.network.gnutls ca user. This allows man-in-the-middle attackers to spoof a TLS chat server via an arbitrary certificate, as the TLS certificate of the server is not properly verified.

Recommendations For WeeChat versions 3.2 through 3.4 before 3.4.1, update to version 3.4.1 to resolve the issue. As a temporary workaround, consider restarting WeeChat after changing weechat.network.gnutls ca system or weechat.network.gnutls ca user to ensure proper TLS certificate verification.

Exploit

Fix

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

CVE-2022-28352

Affected Products

Gnutls

Weechat

References · 11

• 🔥 https://github.com/weechat/weechat/issues/1763 · Exploit
• 🔥 https://weechat.org/doc/security/WSA-2022-1 · Exploit
• https://osv.dev/vulnerability/CVE-2022-28352 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-28352 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-28352 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-28352 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-28352 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-28352 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-28352 · Vendor Advisory
• https://t.me/cvenotify/28359 · Telegram Post
• https://t.me/cvenotify/28339 · Telegram Post