Security Update for simplesamlphp
Summary
DLA-1205-1: simplesamlphp - security update. Affects simplesamlphp versions < 1.9.2-1+deb7u1. Fixed in 1.9.2-1+deb7u1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
simplesamlphp is a package in Debian 7 Wheezy that provides a simple and lightweight way to implement the SAML 2.0 protocol for authentication and authorization. It is widely used in various web applications and services. However, the package is vulnerable to multiple attacks on authentication-related code, which can lead to unauthorized access and information disclosure.
Vulnerability Detail
The vulnerabilities in simplesamlphp include:
-
CVE-2017-12867: The SimpleSAML_Auth_TimeLimitedToken class allows attackers with access to a secret token to extend its validity period by manipulating the prepended time offset.
-
CVE-2017-12869: The multiauth module allows remote attackers to bypass authentication context restrictions and use an authentication source defined in config/authsources.php via vectors related to improper validation of user input.
-
CVE-2017-12872 / CVE-2017-12868: The Htpasswd authentication source in the authcrypt module and the SimpleSAML_Session class in SimpleSAMLphp 1.14.11 and earlier allow remote attackers to conduct timing side-channel attacks by leveraging the use of the standard comparison operator to compare secret material against user input.
-
CVE-2017-12873: SimpleSAMLphp might allow attackers to obtain sensitive information, gain unauthorized access, or have unspecified other impacts by leveraging incorrect persistent NameID generation when an Identity Provider (IdP) is misconfigured.
-
CVE-2017-12874: The InfoCard module for SimpleSAMLphp allows attackers to spoof XML messages by leveraging an incorrect check of return values in signature validation utilities.
How To Fix
Minimum fixed version
1.9.2-1+deb7u1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade simplesamlphpTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
Upgrading your simplesamlphp packages to the fixed version is crucial to protect your system from unauthorized access, information disclosure, and other potential impacts. Ensure that you follow the recommended steps provided by Debian LTS security advisories. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for simplesamlphp →
FAQ
simplesamlphp is a package that provides a simple and lightweight way to implement the SAML 2.0 protocol for authentication and authorization in web applications and services.
The vulnerabilities in simplesamlphp include CVE-2017-12867, CVE-2017-12869, CVE-2017-12872 / CVE-2017-12868, CVE-2017-12873, and CVE-2017-12874. These vulnerabilities can lead to unauthorized access, information disclosure, bypassing authentication context restrictions, timing side-channel attacks, and XML message spoofing.
To fix these vulnerabilities, you should upgrade your simplesamlphp packages to version 1.9.2-1+deb7u1 or later. Follow the instructions provided by Debian LTS security advisories to apply these updates to your system.
No specific workarounds have been mentioned for these vulnerabilities. It is recommended to upgrade to the fixed version of simplesamlphp.
You can find more information about Debian LTS security advisories, how to apply updates, and frequently asked questions at https://wiki.debian.org/LTS.
Related vulnerabilities
Recent vulnerabilities recorded for simplesamlphp.
