CVE-2013-0243: tls-extra - Certificate Validation Does Not Check Basic Constraints
Summary
CVE-2013-0243: tls-extra: certificate validation does not check Basic Constraints. Affects tls-extra versions >= 0.1.0, < 0.4.6.1. Fixed in 0.4.6.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
tls-extra is a package in the Hackage ecosystem that provides additional functionality for TLS (Transport Layer Security) in Haskell. It is used for secure communication over networks. The package allows for certificate chain processing, but it does not properly check the Basic Constraints extension of a certificate. This means that any certificate, regardless of its intended usage, is treated as a CA (Certificate Authority) certificate. This vulnerability opens the door for potential MITM (Man-in-the-Middle) attacks on TLS connections.
Vulnerability Detail
The vulnerability in tls-extra arises from the lack of validation of the Basic Constraints extension in certificate chain processing. This allows an attacker with a valid certificate to use it to sign another certificate with an arbitrary subject DN/domain name. The signed certificate will be accepted by tls-extra, enabling the attacker to perform MITM attacks on TLS connections. This can lead to unauthorized access, data interception, and potential manipulation of sensitive information.
How To Fix
Minimum fixed version
0.4.6.1
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is crucial to update to the fixed version of tls-extra to mitigate the risk of MITM attacks.
Conclusion
The vulnerability in tls-extra's certificate validation can lead to MITM attacks on TLS connections, compromising the security and integrity of communication. It is crucial to update to the fixed version of tls-extra (0.4.6.1 or later) to mitigate this risk. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for tls-extra →
FAQ
tls-extra is a package in the Hackage ecosystem that provides additional functionality for TLS in Haskell. It is used for secure communication over networks.
This vulnerability allows an attacker to perform MITM attacks on TLS connections, potentially leading to unauthorized access, data interception, and manipulation of sensitive information.
To fix this vulnerability, update the tls-extra package to version 0.4.6.1 or later.
There is no known workaround for this vulnerability. It is essential to update to the fixed version of tls-extra.
For more information, you can refer to the security advisory for HSEC-2023-0005 at the following source: https://github.com/haskell/security-advisories/blob/generated/osv-export/2023/HSEC-2023-0005.json
