CVE-2018-17613 Information disclosure in n/a

What is CVE-2018-17613?

CVE-2018-17613 is a critical vulnerability in n/a, published on 28 Sep 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Telegram Desktop (aka tdesktop) 1.3.16 alpha, when "Use proxy" is enabled, sends credentials and application data in cleartext over the SOCKS5 protocol.

Weakness: CWE-522

Which versions are affected by CVE-2018-17613?

It affects 1 product.

Products include Telegram Telegram Desktop.

How do I fix CVE-2018-17613?

No fix has been published for CVE-2018-17613 yet. Limit exposure of the affected software until one is available.

Is CVE-2018-17613 being exploited?

There is no known exploitation of CVE-2018-17613 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2020-17448 Security feature bypass in n/a High 7.8
• CVE-2018-17231 Denial of service in n/a High 7.5
• CVE-2018-17780 Information disclosure in n/a Medium 6.5
• CVE-2021-47793 Telegram Desktop 2.9.2 - Denial of Service (PoC) Medium 4.6
• CVE-2020-25824 Missing authorization in n/a Low 2.4

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2018-17613, GHSA-f948-97vm-63xw, UBUNTU-CVE-2018-17613.