CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
EPSS
Percentile
30.9%
Telegram is a cloud-based mobile and desktop messaging app with a focus on security and speed.
It was discovered that Telegram failed to invalidate a recently active session.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Telegram users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=net-im/telegram-desktop-2.4.11"
All Telegram binary users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose
">=net-im/telegram-desktop-bin-2.4.11"
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Gentoo | any | all | net-im/telegram-desktop | < 2.4.11 | UNKNOWN |
Gentoo | any | all | net-im/telegram-desktop-bin | < 2.4.11 | UNKNOWN |
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
EPSS
Percentile
30.9%