REDHAT-BUG-1869800
First published: Tue Aug 18 2020(Updated: )
A padding oracle vulnerability exists in the AWS S3 Crypto SDK for GoLang versions prior to V2. The SDK allows users to encrypt files with AES-CBC without computing a Message Authentication Code (MAC), which then allows an attacker who has write access to the target's S3 bucket and can observe whether or not an endpoint with access to the key can decrypt a file, they can reconstruct the plaintext with (on average) 128*length (plaintext) queries to the endpoint, by exploiting CBC's ability to manipulate the bytes of the next block and PKCS5 padding errors. Reference: <a href="https://aws.amazon.com/blogs/developer/updates-to-the-amazon-s3-encryption-client/?s=09">https://aws.amazon.com/blogs/developer/updates-to-the-amazon-s3-encryption-client/?s=09</a> <a href="https://github.com/google/security-research/security/advisories/GHSA-f5pg-7wfw-84q9">https://github.com/google/security-research/security/advisories/GHSA-f5pg-7wfw-84q9</a>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Amazon Simple Storage Service | <V2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://aws.amazon.com/blogs/developer/updates-to-the-amazon-s3-encryption-client/?s=09
- https://github.com/google/security-research/security/advisories/GHSA-f5pg-7wfw-84q9
- https://github.com/aws/aws-sdk-go/commit/12ff57a16373dda5a0c22eafdf0fa1c4c224f7c4
- https://access.redhat.com/errata/RHSA-2021:3851
- https://access.redhat.com/security/cve/cve-2020-8911
- https://bugzilla.redhat.com/show_bug.cgi?id=1869800
Frequently Asked Questions
What is the severity of REDHAT-BUG-1869800?
The severity of REDHAT-BUG-1869800 is high due to the potential for attackers to exploit the padding oracle vulnerability.
How do I fix REDHAT-BUG-1869800?
To fix REDHAT-BUG-1869800, update to AWS S3 Crypto SDK for GoLang version V2 or later.
What software is affected by REDHAT-BUG-1869800?
REDHAT-BUG-1869800 affects AWS S3 Crypto SDK for GoLang versions prior to V2.
What is a padding oracle vulnerability in REDHAT-BUG-1869800?
A padding oracle vulnerability in REDHAT-BUG-1869800 allows attackers to exploit the encryption mechanism by manipulating encrypted data without proper authentication.
Can an attacker exploit REDHAT-BUG-1869800 remotely?
Yes, an attacker with write access to the S3 bucket can exploit REDHAT-BUG-1869800 remotely if the target is using an affected version.
- agent/references
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2020-8911
- agent/severity
- agent/description
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/aws
- canonical/amazon simple storage service