Briar vulnerabilities

2 known vulnerabilities in Briar from Briarproject. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.4 High severity

  Briar: Missing Authorization

  CVE-2023-33983May 24, 2023Briarproject

  The Introduction Client in Briar through 1.5.3 does not implement out-of-band verification for the public keys of introducees. An introducer can launch man-in-the-middle attacks against later private communication between two introduced parties.

• 7.5 High severity

  Briar: Uncontrolled Resource Consumption

  CVE-2023-33980May 24, 2023Briarproject

  Bramble Synchronisation Protocol (BSP) in Briar before 1.4.22 allows attackers to cause a denial of service (repeated application crashes) via a series of long messages to a contact.