CVE-2018-17780 - Telegram Desktop (aka tdesktop) 1.3.14, and Telegram 3.3.0.0 WP8.1 on Windows, leaks end-user public and private IP addresses during a call because of an unsafe default behavior in which P2P connections are accepted from clients outside of the My Contacts list

Back Back to CVE browser

MEDIUM

Telegram Desktop (aka tdesktop) 1.3.14, and Telegram 3.3.0.0 WP8.1 on Windows, leaks end-user public and private IP addresses during a call because of an unsafe default behavior in which P2P connections are accepted from clients outside of the My Contacts list

Published Sep 29, 2018

6.5

MEDIUM

CVSS 3.0

EPSS 1.80%

Description

Telegram Desktop (aka tdesktop) 1.3.14, and Telegram 3.3.0.0 WP8.1 on Windows, leaks end-user public and private IP addresses during a call because of an unsafe default behavior in which P2P connections are accepted from clients outside of the My Contacts list.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (3)

http://www.securityfocus.com/bid/105521
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-9527
Advisory
https://www.inputzero.io/2018/09/bug-bounty-telegram-cve-2018-17780.html
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
http://www.securityfocus.com/bid/105521		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-9527		Advisory
https://www.inputzero.io/2018/09/bug-bounty-telegram-cve-2018-17780.html		x_refsource_MISCExploitThird Party Advisory