Kenneth G. Paterson

**Name of the Vulnerable Software and Affected Versions** Nextcloud Desktop Client versions 3.0.0 through 3.6.4 **Description** The issue allows a malicious server administrator to recover and modify the contents of end-to-end encrypted files. This is a significant concern for users who rely on the Nextcloud Desktop Client for synchronizing files from Nextcloud Server. **Recommendations** For Nextcloud Desktop Client versions 3.0.0 through 3.6.4, upgrade to version 3.6.5 to receive a patch. At the moment, there is no other information about additional mitigation measures for this issue.

**Name of the Vulnerable Software and Affected Versions** Nextcloud Desktop client versions 3.0.0 through 3.8.0 Nextcloud Android app versions 3.13.0 through 3.25.0 Nextcloud iOS app versions 3.0.5 through 4.8.0 **Description** A malicious server administrator can gain full access to an end-to-end encrypted folder, allowing them to decrypt files, recover the folder structure, and add new files. **Recommendations** For Nextcloud Desktop client versions 3.0.0 through 3.7.0, update to version 3.8.0. For Nextcloud Android app versions 3.13.0 through 3.24.0, update to version 3.25.0. For Nextcloud iOS app versions 3.0.5 through 4.7.0, update to version 4.8.0.

**Name of the Vulnerable Software and Affected Versions** Nextcloud Desktop Client versions 3.0.0 through 3.6.4 **Description** A malicious server administrator can gain full access to an end-to-end encrypted folder, allowing them to decrypt files, recover the folder structure, and add new files. **Recommendations** For Nextcloud Desktop Client versions 3.0.0 through 3.6.4, upgrade to version 3.6.5 to receive a patch.

**Name of the Vulnerable Software and Affected Versions** Telegram versions prior to 7.8.1 for Android Telegram versions prior to 7.8.3 for iOS Telegram Desktop versions prior to 2.8.8 **Description** A reordering issue exists in Telegram, allowing an attacker to cause the server to receive messages in a different order than they were sent to the client. This issue can be exploited by an attacker, potentially leading to unintended consequences. **Recommendations** For Telegram versions prior to 7.8.1 for Android, update to version 7.8.1 or later. For Telegram versions prior to 7.8.3 for iOS, update to version 7.8.3 or later. For Telegram Desktop versions prior to 2.8.8, update to version 2.8.8 or later.

**Name of the Vulnerable Software and Affected Versions** GnuTLS (affected versions not specified) **Description** A cache-based side channel in the GnuTLS implementation allows for plain text recovery in a cross-VM attack setting. An attacker can use a combination of "Just in Time" Prime+probe attack and Lucky-13 attack with crafted packets to recover plain text. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: GnuTLS (affected versions not specified) Description: The issue is related to the GnuTLS implementation of HMAC-SHA-384, which is vulnerable to a Lucky thirteen style attack. This allows remote attackers to conduct distinguishing attacks and plain text recovery attacks via statistical analysis of timing data using crafted packets. The vulnerability is due to errors in the implementation of the cryptographic algorithm, enabling an attacker to exploit it and perform attacks such as plain text recovery. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: GnuTLS (affected versions not specified) Description: The issue is related to the GnuTLS implementation of HMAC-SHA-256, which is vulnerable to a Lucky thirteen style attack. Remote attackers could exploit this flaw to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data using crafted packets. The vulnerability is associated with errors in the implementation of the cryptographic algorithm, allowing an attacker to exploit it and perform attacks such as plaintext-recovery attacks using specially crafted packets. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.