Vulnerability-Lookup

CVE-2024-39920 (GCVE-0-2024-39920)

Vulnerability from cvelistv5 – Published: 2024-07-03 00:00 – Updated: 2024-08-05 18:37

Summary

The TCP protocol in RFC 9293 has a timing side channel that makes it easier for remote attackers to infer the content of one TCP connection from a client system (to any server), when that client system is concurrently obtaining TCP data at a slow rate from an attacker-controlled server, aka the "SnailLoad" issue. For example, the attack can begin by measuring RTTs via the TCP segments whose role is to provide an ACK control bit and an Acknowledgment Number.

Severity ?

4.3 (Medium)


                        
                          CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE

Assigner

mitre

References

URL

Tags

	https://www.snailload.com
	https://www.snailload.com/snailload.pdf
	https://github.com/IAIK/SnailLoad
	https://www.rfc-editor.org/rfc/rfc9293.txt
	https://www.tugraz.at/en/tu-graz/services/news-st…
	https://twitter.com/tugraz/status/1805272833322299412
	https://news.ycombinator.com/item?id=40809629
	https://www.instagram.com/p/C8wpO1UtExw/

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T04:33:10.876Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.snailload.com"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.snailload.com/snailload.pdf"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/IAIK/SnailLoad"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.rfc-editor.org/rfc/rfc9293.txt"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.tugraz.at/en/tu-graz/services/news-stories/tu-graz-news/singleview/article/neue-sicherheitsluecke-erlaubt-ueberwachung-besuchter-websites-und-angesehener-videos"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://twitter.com/tugraz/status/1805272833322299412"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://news.ycombinator.com/item?id=40809629"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.instagram.com/p/C8wpO1UtExw/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:ietf:tcp:9293:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "tcp",
            "vendor": "ietf",
            "versions": [
              {
                "status": "affected",
                "version": "9293"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "ADJACENT_NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 4.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-39920",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-08-05T18:27:41.004792Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-1255",
                "description": "CWE-1255 Comparison Logic is Vulnerable to Power Side-Channel Attacks",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-08-05T18:37:40.784Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The TCP protocol in RFC 9293 has a timing side channel that makes it easier for remote attackers to infer the content of one TCP connection from a client system (to any server), when that client system is concurrently obtaining TCP data at a slow rate from an attacker-controlled server, aka the \"SnailLoad\" issue. For example, the attack can begin by measuring RTTs via the TCP segments whose role is to provide an ACK control bit and an Acknowledgment Number."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-07-03T04:08:03.460268",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://www.snailload.com"
        },
        {
          "url": "https://www.snailload.com/snailload.pdf"
        },
        {
          "url": "https://github.com/IAIK/SnailLoad"
        },
        {
          "url": "https://www.rfc-editor.org/rfc/rfc9293.txt"
        },
        {
          "url": "https://www.tugraz.at/en/tu-graz/services/news-stories/tu-graz-news/singleview/article/neue-sicherheitsluecke-erlaubt-ueberwachung-besuchter-websites-und-angesehener-videos"
        },
        {
          "url": "https://twitter.com/tugraz/status/1805272833322299412"
        },
        {
          "url": "https://news.ycombinator.com/item?id=40809629"
        },
        {
          "url": "https://www.instagram.com/p/C8wpO1UtExw/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2024-39920",
    "datePublished": "2024-07-03T00:00:00",
    "dateReserved": "2024-07-03T00:00:00",
    "dateUpdated": "2024-08-05T18:37:40.784Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-39920\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2024-07-03T04:15:04.267\",\"lastModified\":\"2024-11-21T09:28:34.183\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"The TCP protocol in RFC 9293 has a timing side channel that makes it easier for remote attackers to infer the content of one TCP connection from a client system (to any server), when that client system is concurrently obtaining TCP data at a slow rate from an attacker-controlled server, aka the \\\"SnailLoad\\\" issue. For example, the attack can begin by measuring RTTs via the TCP segments whose role is to provide an ACK control bit and an Acknowledgment Number.\"},{\"lang\":\"es\",\"value\":\"El protocolo TCP en RFC 9293 tiene un canal lateral de temporizaci\u00f3n que facilita a atacantes remotos inferir el contenido de una conexi\u00f3n TCP desde un sistema cliente (a cualquier servidor), cuando ese sistema cliente est\u00e1 obteniendo simult\u00e1neamente datos TCP a una velocidad lenta desde un servidor controlado por un atacante, tambi\u00e9n conocido como el problema \\\"SnailLoad\\\". Por ejemplo, el ataque puede comenzar midiendo los RTT a trav\u00e9s de los segmentos TCP cuya funci\u00f3n es proporcionar un bit de control ACK y un n\u00famero de reconocimiento.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N\",\"baseScore\":4.3,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"ADJACENT_NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.8,\"impactScore\":1.4}]},\"weaknesses\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-1255\"}]}],\"references\":[{\"url\":\"https://github.com/IAIK/SnailLoad\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://news.ycombinator.com/item?id=40809629\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://twitter.com/tugraz/status/1805272833322299412\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://www.instagram.com/p/C8wpO1UtExw/\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://www.rfc-editor.org/rfc/rfc9293.txt\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://www.snailload.com\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://www.snailload.com/snailload.pdf\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://www.tugraz.at/en/tu-graz/services/news-stories/tu-graz-news/singleview/article/neue-sicherheitsluecke-erlaubt-ueberwachung-besuchter-websites-und-angesehener-videos\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://github.com/IAIK/SnailLoad\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://news.ycombinator.com/item?id=40809629\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://twitter.com/tugraz/status/1805272833322299412\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.instagram.com/p/C8wpO1UtExw/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.rfc-editor.org/rfc/rfc9293.txt\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.snailload.com\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.snailload.com/snailload.pdf\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.tugraz.at/en/tu-graz/services/news-stories/tu-graz-news/singleview/article/neue-sicherheitsluecke-erlaubt-ueberwachung-besuchter-websites-und-angesehener-videos\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://www.snailload.com\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://www.snailload.com/snailload.pdf\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://github.com/IAIK/SnailLoad\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://www.rfc-editor.org/rfc/rfc9293.txt\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://www.tugraz.at/en/tu-graz/services/news-stories/tu-graz-news/singleview/article/neue-sicherheitsluecke-erlaubt-ueberwachung-besuchter-websites-und-angesehener-videos\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://twitter.com/tugraz/status/1805272833322299412\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://news.ycombinator.com/item?id=40809629\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://www.instagram.com/p/C8wpO1UtExw/\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-02T04:33:10.876Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 4.3, \"attackVector\": \"ADJACENT_NETWORK\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"NONE\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"LOW\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-39920\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"poc\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-08-05T18:27:41.004792Z\"}}}], \"affected\": [{\"cpes\": [\"cpe:2.3:a:ietf:tcp:9293:*:*:*:*:*:*:*\"], \"vendor\": \"ietf\", \"product\": \"tcp\", \"versions\": [{\"status\": \"affected\", \"version\": \"9293\"}], \"defaultStatus\": \"unknown\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-1255\", \"description\": \"CWE-1255 Comparison Logic is Vulnerable to Power Side-Channel Attacks\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-08-05T18:26:40.716Z\"}}], \"cna\": {\"affected\": [{\"vendor\": \"n/a\", \"product\": \"n/a\", \"versions\": [{\"status\": \"affected\", \"version\": \"n/a\"}]}], \"references\": [{\"url\": \"https://www.snailload.com\"}, {\"url\": \"https://www.snailload.com/snailload.pdf\"}, {\"url\": \"https://github.com/IAIK/SnailLoad\"}, {\"url\": \"https://www.rfc-editor.org/rfc/rfc9293.txt\"}, {\"url\": \"https://www.tugraz.at/en/tu-graz/services/news-stories/tu-graz-news/singleview/article/neue-sicherheitsluecke-erlaubt-ueberwachung-besuchter-websites-und-angesehener-videos\"}, {\"url\": \"https://twitter.com/tugraz/status/1805272833322299412\"}, {\"url\": \"https://news.ycombinator.com/item?id=40809629\"}, {\"url\": \"https://www.instagram.com/p/C8wpO1UtExw/\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"The TCP protocol in RFC 9293 has a timing side channel that makes it easier for remote attackers to infer the content of one TCP connection from a client system (to any server), when that client system is concurrently obtaining TCP data at a slow rate from an attacker-controlled server, aka the \\\"SnailLoad\\\" issue. For example, the attack can begin by measuring RTTs via the TCP segments whose role is to provide an ACK control bit and an Acknowledgment Number.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"text\", \"description\": \"n/a\"}]}], \"providerMetadata\": {\"orgId\": \"8254265b-2729-46b6-b9e3-3dfca2d5bfca\", \"shortName\": \"mitre\", \"dateUpdated\": \"2024-07-03T04:08:03.460268\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-39920\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2024-08-05T18:37:40.784Z\", \"dateReserved\": \"2024-07-03T00:00:00\", \"assignerOrgId\": \"8254265b-2729-46b6-b9e3-3dfca2d5bfca\", \"datePublished\": \"2024-07-03T00:00:00\", \"assignerShortName\": \"mitre\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}

FKIE_CVE-2024-39920

Vulnerability from fkie_nvd - Published: 2024-07-03 04:15 - Updated: 2024-11-21 09:28

Severity ?

4.3 (Medium) - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Summary

References

	URL	Tags
	cve@mitre.org	https://github.com/IAIK/SnailLoad
	cve@mitre.org	https://news.ycombinator.com/item?id=40809629
	cve@mitre.org	https://twitter.com/tugraz/status/1805272833322299412
	cve@mitre.org	https://www.instagram.com/p/C8wpO1UtExw/
	cve@mitre.org	https://www.rfc-editor.org/rfc/rfc9293.txt
	cve@mitre.org	https://www.snailload.com
	cve@mitre.org	https://www.snailload.com/snailload.pdf
	cve@mitre.org	https://www.tugraz.at/en/tu-graz/services/news-stories/tu-graz-news/singleview/article/neue-sicherheitsluecke-erlaubt-ueberwachung-besuchter-websites-und-angesehener-videos
	af854a3a-2127-422b-91ae-364da2661108	https://github.com/IAIK/SnailLoad
	af854a3a-2127-422b-91ae-364da2661108	https://news.ycombinator.com/item?id=40809629
	af854a3a-2127-422b-91ae-364da2661108	https://twitter.com/tugraz/status/1805272833322299412
	af854a3a-2127-422b-91ae-364da2661108	https://www.instagram.com/p/C8wpO1UtExw/
	af854a3a-2127-422b-91ae-364da2661108	https://www.rfc-editor.org/rfc/rfc9293.txt
	af854a3a-2127-422b-91ae-364da2661108	https://www.snailload.com
	af854a3a-2127-422b-91ae-364da2661108	https://www.snailload.com/snailload.pdf
	af854a3a-2127-422b-91ae-364da2661108	https://www.tugraz.at/en/tu-graz/services/news-stories/tu-graz-news/singleview/article/neue-sicherheitsluecke-erlaubt-ueberwachung-besuchter-websites-und-angesehener-videos

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The TCP protocol in RFC 9293 has a timing side channel that makes it easier for remote attackers to infer the content of one TCP connection from a client system (to any server), when that client system is concurrently obtaining TCP data at a slow rate from an attacker-controlled server, aka the \"SnailLoad\" issue. For example, the attack can begin by measuring RTTs via the TCP segments whose role is to provide an ACK control bit and an Acknowledgment Number."
    },
    {
      "lang": "es",
      "value": "El protocolo TCP en RFC 9293 tiene un canal lateral de temporizaci\u00f3n que facilita a atacantes remotos inferir el contenido de una conexi\u00f3n TCP desde un sistema cliente (a cualquier servidor), cuando ese sistema cliente est\u00e1 obteniendo simult\u00e1neamente datos TCP a una velocidad lenta desde un servidor controlado por un atacante, tambi\u00e9n conocido como el problema \"SnailLoad\". Por ejemplo, el ataque puede comenzar midiendo los RTT a trav\u00e9s de los segmentos TCP cuya funci\u00f3n es proporcionar un bit de control ACK y un n\u00famero de reconocimiento."
    }
  ],
  "id": "CVE-2024-39920",
  "lastModified": "2024-11-21T09:28:34.183",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "ADJACENT_NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 4.3,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "LOW",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 1.4,
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  },
  "published": "2024-07-03T04:15:04.267",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "https://github.com/IAIK/SnailLoad"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://news.ycombinator.com/item?id=40809629"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://twitter.com/tugraz/status/1805272833322299412"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://www.instagram.com/p/C8wpO1UtExw/"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://www.rfc-editor.org/rfc/rfc9293.txt"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://www.snailload.com"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://www.snailload.com/snailload.pdf"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://www.tugraz.at/en/tu-graz/services/news-stories/tu-graz-news/singleview/article/neue-sicherheitsluecke-erlaubt-ueberwachung-besuchter-websites-und-angesehener-videos"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://github.com/IAIK/SnailLoad"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://news.ycombinator.com/item?id=40809629"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://twitter.com/tugraz/status/1805272833322299412"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://www.instagram.com/p/C8wpO1UtExw/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://www.rfc-editor.org/rfc/rfc9293.txt"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://www.snailload.com"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://www.snailload.com/snailload.pdf"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://www.tugraz.at/en/tu-graz/services/news-stories/tu-graz-news/singleview/article/neue-sicherheitsluecke-erlaubt-ueberwachung-besuchter-websites-und-angesehener-videos"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Awaiting Analysis",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-1255"
        }
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary"
    }
  ]
}

WID-SEC-W-2024-1521

Vulnerability from csaf_certbund - Published: 2024-07-03 22:00 - Updated: 2024-07-03 22:00

Summary

TCP/IP Stack: Schwachstelle ermöglicht Offenlegung von Informationen

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung

Der TCP/IP-Stack bzw. die Internet Protocol Suite ist eine Reihe von Kommunikationsprotokollen, die vom Internet oder ähnlichen Netzwerken verwendet werden.

Angriff

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in TCP/IP Stack ausnutzen, um Informationen offenzulegen.

Betroffene Betriebssysteme

- Sonstiges

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "niedrig"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Der TCP/IP-Stack bzw. die Internet Protocol Suite ist eine Reihe von Kommunikationsprotokollen, die vom Internet oder \u00e4hnlichen Netzwerken verwendet werden.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, anonymer Angreifer kann eine Schwachstelle in TCP/IP Stack ausnutzen, um Informationen offenzulegen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Sonstiges",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2024-1521 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1521.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2024-1521 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1521"
      },
      {
        "category": "external",
        "summary": "GitHub Advisory Database vom 2024-07-03",
        "url": "https://github.com/advisories/GHSA-796p-jr7h-8vmq"
      },
      {
        "category": "external",
        "summary": "NIST Vulnerability Database vom 2024-07-03",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-39920"
      },
      {
        "category": "external",
        "summary": "TU Graz Research vom 2024-07-03",
        "url": "https://www.tugraz.at/en/tu-graz/services/news-stories/tu-graz-news/singleview/article/neue-sicherheitsluecke-erlaubt-ueberwachung-besuchter-websites-und-angesehener-videos"
      }
    ],
    "source_lang": "en-US",
    "title": "TCP/IP Stack: Schwachstelle erm\u00f6glicht Offenlegung von Informationen",
    "tracking": {
      "current_release_date": "2024-07-03T22:00:00.000+00:00",
      "generator": {
        "date": "2024-08-15T18:10:53.750+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.5"
        }
      },
      "id": "WID-SEC-W-2024-1521",
      "initial_release_date": "2024-07-03T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2024-07-03T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Open Source TCP/IP Stack",
            "product": {
              "name": "Open Source TCP/IP Stack",
              "product_id": "T017866",
              "product_identification_helper": {
                "cpe": "cpe:/a:open_source:tcpip_stack:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Open Source"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-39920",
      "notes": [
        {
          "category": "description",
          "text": "Es besteht eine Schwachstelle im TCP/IP-Stack. Dieser Fehler besteht im TCP-Protokoll in RFC 9293 aufgrund eines Timing-Seitenkanalproblems, das es erm\u00f6glicht, den Inhalt einer TCP-Verbindung auf einem Client-System abzurufen, wenn es TCP-Daten mit einer langsamen Rate von einem von einem Angreifer kontrollierten Server empf\u00e4ngt. Ein entfernter, anonymer Angreifer kann diese Schwachstelle ausnutzen, um vertrauliche Informationen offenzulegen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T017866"
        ]
      },
      "release_date": "2024-07-03T22:00:00.000+00:00",
      "title": "CVE-2024-39920"
    }
  ]
}

GHSA-796P-JR7H-8VMQ

Vulnerability from github – Published: 2024-07-03 18:47 – Updated: 2024-08-05 21:31

Details

Severity ?

4.3 (Medium)


                  
                    CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2024-39920"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-1255"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-07-03T04:15:04Z",
    "severity": "MODERATE"
  },
  "details": "The TCP protocol in RFC 9293 has a timing side channel that makes it easier for remote attackers to infer the content of one TCP connection from a client system (to any server), when that client system is concurrently obtaining TCP data at a slow rate from an attacker-controlled server, aka the \"SnailLoad\" issue. For example, the attack can begin by measuring RTTs via the TCP segments whose role is to provide an ACK control bit and an Acknowledgment Number.",
  "id": "GHSA-796p-jr7h-8vmq",
  "modified": "2024-08-05T21:31:19Z",
  "published": "2024-07-03T18:47:58Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-39920"
    },
    {
      "type": "WEB",
      "url": "https://github.com/IAIK/SnailLoad"
    },
    {
      "type": "WEB",
      "url": "https://news.ycombinator.com/item?id=40809629"
    },
    {
      "type": "WEB",
      "url": "https://twitter.com/tugraz/status/1805272833322299412"
    },
    {
      "type": "WEB",
      "url": "https://www.instagram.com/p/C8wpO1UtExw"
    },
    {
      "type": "WEB",
      "url": "https://www.rfc-editor.org/rfc/rfc9293.txt"
    },
    {
      "type": "WEB",
      "url": "https://www.snailload.com"
    },
    {
      "type": "WEB",
      "url": "https://www.snailload.com/snailload.pdf"
    },
    {
      "type": "WEB",
      "url": "https://www.tugraz.at/en/tu-graz/services/news-stories/tu-graz-news/singleview/article/neue-sicherheitsluecke-erlaubt-ueberwachung-besuchter-websites-und-angesehener-videos"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
      "type": "CVSS_V3"
    }
  ]
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2024-39920 (GCVE-0-2024-39920)

FKIE_CVE-2024-39920

WID-SEC-W-2024-1521

GHSA-796P-JR7H-8VMQ

Tags

Sightings

Nomenclature