debian/tang vulnerabilities

Latest debian/tang CVEs

Newest publication first

1. DLA-3648-1 tang - security update

   Published 2023-11-07

   Unknown

2. CVE-2023-1672 Race condition exists in the key generation and rotation functionality

   Published 2023-07-11

   Medium·CVSS 5.3 EPSS 0.57%

   A race condition exists in the Tang server functionality for key generation and key rotation. This flaw results in a small time window where Tang private keys become readable by other processes on the same host.

3. CVE-2021-4076 A flaw exists in tang, a network-based cryptographic binding server, which could result in leak of private keys.

   Published 2022-03-02

   High·CVSS 7.5 EPSS 1.6%

   A flaw exists in tang, a network-based cryptographic binding server, which could result in leak of private keys.

4. DSA-5025-1 tang - security update

   Published 2021-12-19

   Unknown

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.