PatchTheCVEbriar vulnerabilities and fixes
Recent CVEs affecting briar, with upgrade or downgrade steps. 4 tracked.
briar has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2023-05-24. Highest priority: CVE-2023-33980 (score 51/100).
- CVE-2023-33983 HIGH 7.4 UPGRADE The Introduction Client in Briar through 1.5.3 does not implement out-of-band verification for the public keys
- CVE-2023-33982 MEDIUM 5.9 UPGRADE Bramble Handshake Protocol (BHP) in Briar before 1.5.3 is not forward secure: eavesdroppers can decrypt networ
- CVE-2023-33981 MEDIUM 6.5 UPGRADE Briar before 1.4.22 allows attackers to spoof other users' messages in a blog, forum, or private group, but ea
- CVE-2023-33980 HIGH 7.5 UPGRADE Bramble Synchronisation Protocol (BSP) in Briar before 1.4.22 allows attackers to cause a denial of service (r
FAQ
How do I fix briar vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is briar being exploited right now?
None of the tracked briar CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which briar CVE should I patch first?
CVE-2023-33980 currently ranks highest (51/100): Bramble Synchronisation Protocol (BSP) in Briar before 1.4.22 allows attackers to cause a denial of service (r.