id: PYSEC-2018-31
details: 'tlslite-ng version 0.7.3 and earlier, since commit d7b288316bca7bcdd082e6ccff5491e241305233
  contains a CWE-354: Improper Validation of Integrity Check Value vulnerability in
  TLS implementation, tlslite/utils/constanttime.py: ct_check_cbc_mac_and_pad(); line
  "end_pos = data_len - 1 - mac.digest_size" that can result in an attacker manipulating
  the TLS ciphertext which will not be detected by receiving tlslite-ng. This attack
  appears to be exploitable via man in the middle on a network connection. This vulnerability
  appears to have been fixed after commit 3674815d1b0f7484454995e2737a352e0a6a93d8.'
affected:
- package:
    name: tlslite-ng
    ecosystem: PyPI
    purl: pkg:pypi/tlslite-ng
  ranges:
  - type: ECOSYSTEM
    events:
    - introduced: '0'
    - fixed: 0.7.4
  versions:
  - 0.5.0
  - 0.5.0-beta1
  - 0.5.0-beta2
  - 0.5.0-beta3
  - 0.5.0-beta4
  - 0.5.0-beta5
  - 0.5.0-beta6
  - 0.5.1
  - 0.5.2
  - 0.6.0
  - 0.6.0-alpha1
  - 0.6.0-alpha2
  - 0.6.0-alpha3
  - 0.6.0-alpha4
  - 0.6.0-alpha5
  - 0.6.0-beta1
  - 0.7.0
  - 0.7.0-alpha1
  - 0.7.0-alpha2
  - 0.7.0-alpha3
  - 0.7.0-alpha4
  - 0.7.0-alpha5
  - 0.7.0-alpha6
  - 0.7.0-alpha7
  - 0.7.0-alpha8
  - 0.7.0-alpha9
  - 0.7.0-beta1
  - 0.7.1
  - 0.7.2
  - 0.7.3
references:
- type: WEB
  url: https://github.com/tomato42/tlslite-ng/pull/234
- type: ADVISORY
  url: https://github.com/advisories/GHSA-cwh5-3cw7-4286
aliases:
- CVE-2018-1000159
- GHSA-cwh5-3cw7-4286
modified: '2021-06-16T00:03:25.014006Z'
published: '2018-04-18T19:29:00Z'