CVE-2018-1000159: tlslite-ng Improper Validation of Integrity Check Value
Summary
CVE-2018-1000159: tlslite-ng version 0.7.3 and earlier, since commit d7b288316bca7bcdd082e6ccff5491e241305233 contains a CWE-354: Improper Validation of Integrity Check Value vulnerability in TLS implementation, tlslite/utils/constanttime... Affects tlslite-ng versions < 0.7.4. Fixed in 0.7.4. How to fix ↓
Also tracked for
- tlslite-ng · Debian:10
The same CVE-2018-1000159 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
tlslite-ng is a Python library that provides a TLS (Transport Layer Security) implementation. It is used for secure communication over networks and is widely used in various applications. However, versions 0.7.3 and earlier of tlslite-ng are vulnerable to a CWE-354: Improper Validation of Integrity Check Value. This vulnerability allows an attacker to manipulate the TLS ciphertext, which can go undetected by the receiving tlslite-ng. The vulnerability can be exploited through a man-in-the-middle attack on a network connection.
Vulnerability Detail
The vulnerability in tlslite-ng version 0.7.3 and earlier lies in the ct_check_cbc_mac_and_pad() function in tlslite/utils/constanttime.py. Specifically, the line 'end_pos = data_len - 1 - mac.digest_size' is susceptible to manipulation by an attacker. This manipulation can result in the ciphertext being altered without detection. The impact of this vulnerability is that an attacker can tamper with the encrypted data, potentially leading to unauthorized access, data leakage, or other malicious activities. The vulnerability has been fixed in version 0.7.4 of tlslite-ng.
How To Fix
Minimum fixed version
0.7.4
This is the first release that contains the fix.
pip install --upgrade "tlslite-ng==0.7.4"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. The recommended approach is to upgrade to the fixed version of tlslite-ng.
Conclusion
tlslite-ng versions 0.7.3 and earlier are vulnerable to an integrity check value validation issue. This can be exploited by an attacker to manipulate TLS ciphertext without detection. It is crucial to upgrade to version 0.7.4 or later to mitigate this vulnerability. For further assistance or support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for tlslite-ng →
FAQ
tlslite-ng is a Python library that provides a TLS implementation for secure communication over networks.
The vulnerability allows an attacker to manipulate TLS ciphertext, potentially leading to unauthorized access or data leakage.
To fix this vulnerability, upgrade tlslite-ng to version 0.7.4 or later.
There is no specific workaround mentioned. Upgrading to the fixed version is recommended.
You can find more information about this vulnerability in the tlslite-ng advisory database.
References
Related vulnerabilities
Recent vulnerabilities recorded for tlslite-ng.
