CVE-2023-1672
Race condition exists in the key generation and rotation functionality
Summary
Race condition exists in the key generation and rotation functionality
Original description
The description as published by the source.
A race condition exists in the Tang server functionality for key generation and key rotation. This flaw results in a small time window where Tang private keys become readable by other processes on the same host.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2023-1672 tang Fixed in: 8-3+deb11u2
References
- advisory access.redhat.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- report bugzilla.redhat.com
- web access.redhat.com
- web lists.debian.org
- web packages.fedoraproject.org
- web openwall.com