Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2023-36811— Archive spoofing vulnerability in borgbackup

Quick assessment

Affected
borgbackup borg
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

BorgBackup是通过压缩和加密进行重复数据删除的归档程序。 BorgBackup 1.2.5之前版本存在数据伪造问题漏洞，该漏洞源于BorgBackup中的加密身份验证方案中存在缺陷，允许攻击者伪造存档并可能间接导致存储库中的备份数据丢失。

CVSS 4.7 · Medium EPSS 0.11% · P1

Possible ATT&CK Techniques 1 AI

T1491.002 · External Defacement
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2023-36811

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Archive spoofing vulnerability in borgbackup
Source: CVE Program / CVE List V5
Vulnerability Description
borgbackup is an opensource, deduplicating archiver with compression and authenticated encryption. A flaw in the cryptographic authentication scheme in borgbackup allowed an attacker to fake archives and potentially indirectly cause backup data loss in the repository. The attack requires an attacker to be able to: 1. insert files (with no additional headers) into backups and 2. gain write access to the repository. This vulnerability does not disclose plaintext to the attacker, nor does it affect the authenticity of existing archives. Creating plausible fake archives may be feasible for empty or small archives, but is unlikely for large archives. The issue has been fixed in borgbackup 1.2.5. Users are advised to upgrade. Additionally to installing the fixed code, users must follow the upgrade procedure as documented in the change log. Data loss after being attacked can be avoided by reviewing the archives (timestamp and contents valid and as expected) after any "borg check --repair" and before "borg prune". There are no known workarounds for this vulnerability.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
密码学签名的验证不恰当
Source: CVE Program / CVE List V5
Vulnerability Title
BorgBackup 数据伪造问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
BorgBackup是通过压缩和加密进行重复数据删除的归档程序。 BorgBackup 1.2.5之前版本存在数据伪造问题漏洞，该漏洞源于BorgBackup中的加密身份验证方案中存在缺陷，允许攻击者伪造存档并可能间接导致存储库中的备份数据丢失。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
borgbackup borg < 1.2.5 -

II. Public POCs for CVE-2023-36811

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2023-36811

请登录查看更多情报信息。

Patches & Fixes for CVE-2023-36811 (1)

Vendor Advisories for CVE-2023-36811 (1)

Mailing List Discussions for CVE-2023-36811 (3)

Other References for CVE-2023-36811 (1)

IV. Related Vulnerabilities

Same weakness: CWE-347

V. Comments for CVE-2023-36811

No comments yet

Leave a comment