Approved changes feed: RSS · Atom
cpe:2.3:a:tang_project:tang:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Tang Project (00942cb8-dfa7-58dd-8c0d-657bc831be03) |
|---|---|
| Product | Tang (1c41d295-65dc-56d1-8c65-a106c4c509bb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/tang |
purl2cpe | 2026-06-01 10:11:11.321195 |
pkg:deb/ubuntu/tang |
purl2cpe | 2026-06-01 10:11:11.321198 |
pkg:github/latchset/tang |
purl2cpe | 2026-06-01 10:11:11.321201 |
pkg:rpm/centos/tang |
purl2cpe | 2026-06-01 10:11:11.321204 |
pkg:rpm/fedora/tang |
purl2cpe | 2026-06-01 10:11:11.321207 |
pkg:rpm/opensuse/tang |
purl2cpe | 2026-06-01 10:11:11.321209 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-1672 |
vulnerable | 2026-06-08 05:52:36.504823 |
Race condition exists in the key generation and rotation functionality
MEDIUM (5.3)
A race condition exists in the Tang server functionality for key generation and key rotation. This flaw results in a small time window where Tang private keys become readable by other processes on the same host.
Published: 2023-07-11T11:47:35.363Z
Updated: 2025-02-13T16:39:29.669Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-4076 |
vulnerable | 2026-06-08 05:38:08.295607 |
Details available
A flaw exists in tang, a network-based cryptographic binding server, which could result in leak of private keys.
Published: 2022-03-02T22:23:33.000Z
Updated: 2024-08-03T17:16:03.537Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.