Unscored CVE-2018-17613 EUVD-2018-9360GHSA-f948-97vm-63xw

Telegram Desktop (aka tdesktop) 1.3.16 alpha, when "Use proxy" is enabled, sends credentials and application data in cleartext over the SOC…

Published Sep 28, 2018 · Updated Aug 5, 2024 · Assigned by mitre

Package: telegram-desktop Package: telegram-desktop Ecosystem: Debian Ecosystem: Ubuntu

Description

Telegram Desktop (aka tdesktop) 1.3.16 alpha, when "Use proxy" is enabled, sends credentials and application data in cleartext over the SOCKS5 protocol.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	telegram-desktop	No fix yet	—
Debian 12	telegram-desktop	No fix yet	—

Ubuntu