Multiple vulnerabilities in RNP

Published: 2023-08-20

Risk	Medium
Patch available	YES
Number of vulnerabilities	2
CVE-ID	CVE-2023-29479 CVE-2023-29480
CWE-ID	CWE-20 CWE-312
Exploitation vector	Network
Public exploit	N/A
Vulnerable software Subscribe	RNP Universal components / Libraries / Libraries used by multiple products
Vendor	Ribose

Security Bulletin

This security bulletin contains information about 2 vulnerabilities.

1) Input validation error

EUVDB-ID: #VU74972

Risk: Medium

CVSSv3.1: 4.6 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-29479

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation of user-supplied input within the Ribose RNP library when parsing PKESK/SKESK packets. A remote attacker can send specially crafted OpenPGP messages to the application and perform a denial of service (DoS) attack.

Mitigation

Install update from vendor's website.

Vulnerable software versions

RNP: 0.9.1 - 0.16.2

External links

http://rnpgp.org/blog/2023-04-13-rnp-release-0-16-3/

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Cleartext storage of sensitive information

EUVDB-ID: #VU79715

Risk: Low

CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-29480

CWE-ID: CWE-312 - Cleartext Storage of Sensitive Information