ALT-PU-2023-7560-3

Package update tang in branch sisyphus

Version14-alt1

Published2026-02-04

Max severityMEDIUM

Severity:

Closed issues (2)

MEDIUM5.3

Уязвимость компонента Private Key Handler сервера разблокировки зашифрованных дисков Tang, позволяющая нарушителю раскрыть защищаемую информацию

Published: 2023-12-04Modified: 2025-11-19

CVSS 3.xMEDIUM 5.3

CVSS:3.x/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS 2.0MEDIUM 4.6

CVSS:2.0/AV:A/AC:H/Au:N/C:C/I:N/A:N

References

CVE-2023-1672

MEDIUM5.3

A race condition exists in the Tang server functionality for key generation and key rotation. This flaw results in a small time window where Tang private keys become readable by other processes on the same host.

Published: 2023-07-11Modified: 2024-11-21

CVSS 3.xMEDIUM 5.3

CVSS:3.x/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

References