Vulnerability-Lookup

OESA-2023-1403 (CVE-2023-1672)

Vulnerability from osv_openeuler – Published: 2023-07-08 11:05 – Updated: 2026-08-06 11:05 – Source website

Summary

tang security update

Details

This package is a server for binding data to network presence. First, the client gets a list of the Tang server's advertised asymmetric keys. This can happen online by a simple HTTP GET. Alternatively, since the keys are asymmetric, the public key list can be distributed out of band. Second, the client uses one of these public keys to generate a unique, cryptographically strong encryption key. The data is then encrypted using this key. Once the data is encrypted, the key is discarded. Some small metadata is produced as part of this operation which the client should store in a convenient location. This process of encrypting data is the provisioning step. Third, when the client is ready to access its data, it simply loads the metadata produced in the provisioning step and performs an HTTP POST in order to recover the encryption key. This process is the recovery step.

Security Fix(es):

A race condition exists in the Tang server functionality for key generation and key rotation. This flaw results in a small time window where Tang private keys become readable by other processes on the same host.(CVE-2023-1672)

Severity

5.3 (Medium)


                    
                      CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

References

URL

Type

	https://www.openeuler.org/en/security/safety-bull…	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2023-1672	ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "aarch64": [
          "tang-7-4.oe1.aarch64.rpm",
          "tang-debugsource-7-4.oe1.aarch64.rpm",
          "tang-debuginfo-7-4.oe1.aarch64.rpm"
        ],
        "noarch": [
          "tang-help-7-4.oe1.noarch.rpm"
        ],
        "src": [
          "tang-7-4.oe1.src.rpm"
        ],
        "x86_64": [
          "tang-debugsource-7-4.oe1.x86_64.rpm",
          "tang-7-4.oe1.x86_64.rpm",
          "tang-debuginfo-7-4.oe1.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:20.03-LTS-SP1",
        "name": "tang",
        "purl": "pkg:rpm/openEuler/tang\u0026distro=openEuler-20.03-LTS-SP1"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7-4.oe1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "aarch64": [
          "tang-7-4.oe1.aarch64.rpm",
          "tang-debuginfo-7-4.oe1.aarch64.rpm",
          "tang-debugsource-7-4.oe1.aarch64.rpm"
        ],
        "noarch": [
          "tang-help-7-4.oe1.noarch.rpm"
        ],
        "src": [
          "tang-7-4.oe1.src.rpm"
        ],
        "x86_64": [
          "tang-debugsource-7-4.oe1.x86_64.rpm",
          "tang-debuginfo-7-4.oe1.x86_64.rpm",
          "tang-7-4.oe1.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:20.03-LTS-SP3",
        "name": "tang",
        "purl": "pkg:rpm/openEuler/tang\u0026distro=openEuler-20.03-LTS-SP3"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7-4.oe1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "aarch64": [
          "tang-debugsource-7-3.oe2203.aarch64.rpm",
          "tang-debuginfo-7-3.oe2203.aarch64.rpm",
          "tang-7-3.oe2203.aarch64.rpm",
          "tang-debuginfo-7-3.oe2203sp1.aarch64.rpm",
          "tang-debugsource-7-3.oe2203sp1.aarch64.rpm",
          "tang-7-3.oe2203sp1.aarch64.rpm",
          "tang-debugsource-7-3.oe2203sp2.aarch64.rpm",
          "tang-debuginfo-7-3.oe2203sp2.aarch64.rpm",
          "tang-7-3.oe2203sp2.aarch64.rpm"
        ],
        "noarch": [
          "tang-help-7-3.oe2203.noarch.rpm",
          "tang-help-7-3.oe2203sp1.noarch.rpm",
          "tang-help-7-3.oe2203sp2.noarch.rpm"
        ],
        "src": [
          "tang-7-3.oe2203.src.rpm",
          "tang-7-3.oe2203sp1.src.rpm",
          "tang-7-3.oe2203sp2.src.rpm"
        ],
        "x86_64": [
          "tang-7-3.oe2203.x86_64.rpm",
          "tang-debugsource-7-3.oe2203.x86_64.rpm",
          "tang-debuginfo-7-3.oe2203.x86_64.rpm",
          "tang-7-3.oe2203sp1.x86_64.rpm",
          "tang-debuginfo-7-3.oe2203sp1.x86_64.rpm",
          "tang-debugsource-7-3.oe2203sp1.x86_64.rpm",
          "tang-7-3.oe2203sp2.x86_64.rpm",
          "tang-debugsource-7-3.oe2203sp2.x86_64.rpm",
          "tang-debuginfo-7-3.oe2203sp2.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:22.03-LTS",
        "name": "tang",
        "purl": "pkg:rpm/openEuler/tang\u0026distro=openEuler-22.03-LTS"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7-3.oe2203sp2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "aarch64": [
          "tang-debuginfo-7-3.oe2203sp1.aarch64.rpm",
          "tang-debugsource-7-3.oe2203sp1.aarch64.rpm",
          "tang-7-3.oe2203sp1.aarch64.rpm"
        ],
        "noarch": [
          "tang-help-7-3.oe2203sp1.noarch.rpm"
        ],
        "src": [
          "tang-7-3.oe2203sp1.src.rpm"
        ],
        "x86_64": [
          "tang-7-3.oe2203sp1.x86_64.rpm",
          "tang-debuginfo-7-3.oe2203sp1.x86_64.rpm",
          "tang-debugsource-7-3.oe2203sp1.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:22.03-LTS-SP1",
        "name": "tang",
        "purl": "pkg:rpm/openEuler/tang\u0026distro=openEuler-22.03-LTS-SP1"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7-3.oe2203sp1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "aarch64": [
          "tang-debugsource-7-3.oe2203sp2.aarch64.rpm",
          "tang-debuginfo-7-3.oe2203sp2.aarch64.rpm",
          "tang-7-3.oe2203sp2.aarch64.rpm"
        ],
        "noarch": [
          "tang-help-7-3.oe2203sp2.noarch.rpm"
        ],
        "src": [
          "tang-7-3.oe2203sp2.src.rpm"
        ],
        "x86_64": [
          "tang-7-3.oe2203sp2.x86_64.rpm",
          "tang-debugsource-7-3.oe2203sp2.x86_64.rpm",
          "tang-debuginfo-7-3.oe2203sp2.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:22.03-LTS-SP2",
        "name": "tang",
        "purl": "pkg:rpm/openEuler/tang\u0026distro=openEuler-22.03-LTS-SP2"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7-3.oe2203sp2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "severity": "Medium"
  },
  "details": "This package is a server for binding data to network presence. First, the client gets a list of the Tang server\u0026apos;s advertised asymmetric keys. This can happen online by a simple HTTP GET. Alternatively, since the keys are asymmetric, the public key list can be distributed out of band. Second, the client uses one of these public keys to generate a unique, cryptographically strong encryption key. The data is then encrypted using this key. Once the data is encrypted, the key is discarded. Some small metadata is produced as part of this operation which the client should store in a convenient location. This process of encrypting data is the provisioning step. Third, when the client is ready to access its data, it simply loads the metadata produced in the provisioning step and performs an HTTP POST in order to recover the encryption key. This process is the recovery step.\n\nSecurity Fix(es):\n\nA race condition exists in the Tang server functionality for key generation and key rotation. This flaw results in a small time window where Tang private keys become readable by other processes on the same host.(CVE-2023-1672)",
  "id": "OESA-2023-1403",
  "modified": "2026-08-06T11:05:52Z",
  "published": "2023-07-08T11:05:52Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1403"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1672"
    }
  ],
  "schema_version": "1.7.2",
  "severity": [
    {
      "score": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
      "type": "CVSS_V3"
    }
  ],
  "summary": "tang security update",
  "upstream": [
    "CVE-2023-1672"
  ]
}

CVE-2023-1672 (GCVE-0-2023-1672)

Vulnerability from cvelistv5 – Published: 2023-07-11 11:47 – Updated: 2025-02-13 16:39

Title

Race condition exists in the key generation and rotation functionality

Summary

Severity

5.3 (Medium)


                        
                          CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-10-01 16:29 UTC

CWE

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Assigner

redhat redhat root

References

5 references

URL	Tags
https://access.redhat.com/security/cve/CVE-2023-1672	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2180999	issue-trackingx_refsource_REDHAT
https://github.com/latchset/tang/commit/8dbbed108…
https://www.openwall.com/lists/oss-security/2023/…
https://lists.debian.org/debian-lts-announce/2023…

Impacted products

5 products

Vendor	Product	Version
n/a	tang
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Fedora	Fedora

Date Public

2023-06-07 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T05:57:24.884Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2023-1672"
          },
          {
            "name": "RHBZ#2180999",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2180999"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/latchset/tang/commit/8dbbed10870378f1b2c3cf3df2ea7edca7617096"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.openwall.com/lists/oss-security/2023/06/15/1"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00004.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-1672",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-01T16:29:42.615646Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-01T16:29:57.256Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "product": "tang",
          "vendor": "n/a"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7"
          ],
          "defaultStatus": "unknown",
          "packageName": "tang",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8"
          ],
          "defaultStatus": "affected",
          "packageName": "tang",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9"
          ],
          "defaultStatus": "affected",
          "packageName": "tang",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://packages.fedoraproject.org/",
          "defaultStatus": "affected",
          "packageName": "tang",
          "product": "Fedora",
          "vendor": "Fedora"
        }
      ],
      "datePublic": "2023-06-07T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A race condition exists in the Tang server functionality for key generation and key rotation. This flaw results in a small time window where Tang private keys become readable by other processes on the same host."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Moderate"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-362",
              "description": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-11-07T21:06:32.549Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2023-1672"
        },
        {
          "name": "RHBZ#2180999",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2180999"
        },
        {
          "url": "https://github.com/latchset/tang/commit/8dbbed10870378f1b2c3cf3df2ea7edca7617096"
        },
        {
          "url": "https://www.openwall.com/lists/oss-security/2023/06/15/1"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00004.html"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2023-03-22T00:00:00.000Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2023-06-07T00:00:00.000Z",
          "value": "Made public."
        }
      ],
      "title": "Race condition exists in the key generation and rotation functionality",
      "x_redhatCweChain": "CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2023-1672",
    "datePublished": "2023-07-11T11:47:35.363Z",
    "dateReserved": "2023-03-28T15:03:04.864Z",
    "dateUpdated": "2025-02-13T16:39:29.669Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.