CVE-2019-17191

The Signal Private Messenger application before 4.47.7 for Android allows a caller to force a call to be answered, without callee user interaction, via a connect message. The existence of the call is noticeable to the callee; however, the audio channel may be open before the callee can block eavesdropping.

CVSS v3 7.5 HIGH
CVSS v2.0 5.0 MEDIUM

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
https://bugs.chromium.org/p/project-zero/issues/detail?id=1943	Exploit Third Party Advisory
https://news.ycombinator.com/item?id=21161432	Exploit Issue Tracking Third Party Advisory
https://twitter.com/moxie/status/1180261210341511168	Third Party Advisory
https://bugs.chromium.org/p/project-zero/issues/detail?id=1943	Exploit Third Party Advisory
https://news.ycombinator.com/item?id=21161432	Exploit Issue Tracking Third Party Advisory
https://twitter.com/moxie/status/1180261210341511168	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:signal:private_messenger:*:*:*:*:*:android:*:*

History

No history.

Information

Published : 2019-10-05 02:15

Updated : 2024-11-21 04:31

NVD link : CVE-2019-17191

Mitre link : CVE-2019-17191

CVE.ORG link : CVE-2019-17191

JSON object : View

Products Affected

signal

private_messenger

CWE

CWE-863

Incorrect Authorization

{"id": "CVE-2019-17191", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2019-10-05T02:15:11.300", "references": [{"url": "https://bugs.chromium.org/p/project-zero/issues/detail?id=1943", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://news.ycombinator.com/item?id=21161432", "tags": ["Exploit", "Issue Tracking", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://twitter.com/moxie/status/1180261210341511168", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://bugs.chromium.org/p/project-zero/issues/detail?id=1943", "tags": ["Exploit", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://news.ycombinator.com/item?id=21161432", "tags": ["Exploit", "Issue Tracking", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://twitter.com/moxie/status/1180261210341511168", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-863"}]}], "descriptions": [{"lang": "en", "value": "The Signal Private Messenger application before 4.47.7 for Android allows a caller to force a call to be answered, without callee user interaction, via a connect message. The existence of the call is noticeable to the callee; however, the audio channel may be open before the callee can block eavesdropping."}, {"lang": "es", "value": "La aplicaci\u00f3n Signal Private Messenger versiones anteriores a 4.47.7 para Android, permite a la persona que llama forzar una llamada para ser respondida, sin interacci\u00f3n del usuario llamado, por medio de un mensaje de conexi\u00f3n. La existencia de la llamada es notable para la persona que llama; sin embargo, el canal de audio puede estar abierto antes de que la persona que llama pueda bloquear las escuchas."}], "lastModified": "2024-11-21T04:31:50.000", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:signal:private_messenger:*:*:*:*:*:android:*:*", "vulnerable": true, "matchCriteriaId": "843D1ABD-4EB8-4BAF-987D-6A51D11C2C10", "versionEndExcluding": "4.47.7"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}