Tailscale up to 1.32.2 on Windows tailscaled cross-site request forgery

Summaryinfo

A vulnerability was found in Tailscale up to 1.32.2 on Windows. It has been classified as problematic. Affected by this issue is some unknown functionality of the component tailscaled. This manipulation causes cross-site request forgery. This vulnerability appears as CVE-2022-41924. The attack may be initiated remotely. There is no available exploit. Upgrading the affected component is recommended.

Detailsinfo

A vulnerability has been found in Tailscale up to 1.32.2 on Windows and classified as problematic. Affected by this vulnerability is an unknown code block of the component tailscaled. The manipulation with an unknown input leads to a cross-site request forgery vulnerability. The CWE definition for the vulnerability is CWE-352. The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request. As an impact it is known to affect integrity. The summary by CVE is:

A vulnerability identified in the Tailscale Windows client allows a malicious website to reconfigure the Tailscale daemon `tailscaled`, which can then be used to remotely execute code. In the Tailscale Windows client, the local API was bound to a local TCP socket, and communicated with the Windows client GUI in cleartext with no Host header verification. This allowed an attacker-controlled website visited by the node to rebind DNS to an attacker-controlled DNS server, and then make local API requests in the client, including changing the coordination server to an attacker-controlled coordination server. An attacker-controlled coordination server can send malicious URL responses to the client, including pushing executables or installing an SMB share. These allow the attacker to remotely execute code on the node. All Windows clients prior to version v.1.32.3 are affected. If you are running Tailscale on Windows, upgrade to v1.32.3 or later to remediate the issue.

The weakness was presented 11/24/2022 as GHSA-vqp6-rc3h-83cp. It is possible to read the advisory at github.com. This vulnerability is known as CVE-2022-41924 since 09/30/2022. It demands that the victim is doing some kind of user interaction. The technical details are unknown and an exploit is not publicly available.

Upgrading to version 1.32.3 eliminates this vulnerability.

Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Name

• Tailscale

Version

• 1.32.0
• 1.32.1
• 1.32.2

Website

• Product: https://github.com/tailscale/tailscale/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion