CVE:CVE-2023-1672
CNNVD:CNNVD-202307-767
Tang是latchset开源的一个将数据绑定到网络的服务器。
Tang存在安全漏洞，该漏洞源于存在密钥生成和密钥轮换的竞争条件，会导致同一主机上的其他进程在很短的时间窗口内读取私钥。
solution:Upgrade tang_project tang to a higher version than 14,and avoid the version (,14); Upgrade fedoraproject fedora to a higher version than 38,and avoid the version 38; Upgrade redhat enterprise_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0