REDHAT-BUG-1869801
First published: Tue Aug 18 2020(Updated: )
A vulnerability in the in-band key negotiation exists in the AWS S3 Crypto SDK for GoLang versions prior to V2. An attacker with write access to the targeted bucket can change the encryption algorithm of an object in the bucket, which can then allow them to change AES-GCM to AES-CTR. Using this in combination with a decryption oracle can reveal the authentication key used by AES-GCM as decrypting the GMAC tag leaves the authentication key recoverable as an algebraic equation. References: <a href="https://aws.amazon.com/blogs/developer/updates-to-the-amazon-s3-encryption-client/?s=09">https://aws.amazon.com/blogs/developer/updates-to-the-amazon-s3-encryption-client/?s=09</a> <a href="https://github.com/google/security-research/security/advisories/GHSA-7f33-f4f5-xwgw">https://github.com/google/security-research/security/advisories/GHSA-7f33-f4f5-xwgw</a>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Amazon Simple Storage Service | <V2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://aws.amazon.com/blogs/developer/updates-to-the-amazon-s3-encryption-client/?s=09
- https://github.com/google/security-research/security/advisories/GHSA-7f33-f4f5-xwgw
- https://github.com/aws/aws-sdk-go/commit/12ff57a16373dda5a0c22eafdf0fa1c4c224f7c4
- https://access.redhat.com/errata/RHSA-2021:3851
- https://access.redhat.com/security/cve/cve-2020-8912
- https://bugzilla.redhat.com/show_bug.cgi?id=1869801
Frequently Asked Questions
What is the severity of REDHAT-BUG-1869801?
REDHAT-BUG-1869801 has a critical severity rating due to the potential for unauthorized encryption algorithm changes in AWS S3 objects.
How do I fix REDHAT-BUG-1869801?
To fix REDHAT-BUG-1869801, upgrade to AWS S3 Crypto SDK for GoLang version 2 or higher.
Who is affected by REDHAT-BUG-1869801?
AWS S3 Crypto SDK for GoLang users prior to version 2 are affected by REDHAT-BUG-1869801.
What does REDHAT-BUG-1869801 exploit?
REDHAT-BUG-1869801 exploits the in-band key negotiation, allowing attackers with write access to change the encryption algorithm.
What are the implications of REDHAT-BUG-1869801?
The implications of REDHAT-BUG-1869801 include potential data exposure and integrity issues due to unauthorized encryption changes.
- agent/references
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2020-8912
- agent/severity
- agent/description
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/aws
- canonical/amazon simple storage service