Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-1672

Опубликовано: 11 июл. 2023
Источник: nvd
CVSS3: 5.3
EPSS Низкий

Описание

A race condition exists in the Tang server functionality for key generation and key rotation. This flaw results in a small time window where Tang private keys become readable by other processes on the same host.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:tang_project:tang:*:*:*:*:*:*:*:*
Версия до 14 (исключая)
Конфигурация 2
cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
Конфигурация 3

Одно из

cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 7%
0.00028
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-362
CWE-362

Связанные уязвимости

CVSS3: 5.3
ubuntu
больше 2 лет назад

A race condition exists in the Tang server functionality for key generation and key rotation. This flaw results in a small time window where Tang private keys become readable by other processes on the same host.

CVSS3: 5.3
redhat
больше 2 лет назад

A race condition exists in the Tang server functionality for key generation and key rotation. This flaw results in a small time window where Tang private keys become readable by other processes on the same host.

CVSS3: 5.3
msrc
больше 2 лет назад

Race condition exists in the key generation and rotation functionality

CVSS3: 5.3
debian
больше 2 лет назад

A race condition exists in the Tang server functionality for key gener ...

CVSS3: 5.3
github
больше 2 лет назад

A race condition exists in the Tang server functionality for key generation and key rotation. This flaw results in a small time window where Tang private keys become readable by other processes on the same host.

EPSS

Процентиль: 7%
0.00028
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-362
CWE-362