CVE-2021-27351

NameCVE-2021-27351
DescriptionThe Terminate Session feature in the Telegram application through 7.2.1 for Android, and through 2.4.7 for Windows and UNIX, fails to invalidate a recently active session.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub code/issues, web search, more)
NVD severitymedium

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
telegram-desktop (PTS)buster1.5.11-1vulnerable
bullseye2.5.8+ds-2fixed
sid2.6.1+ds-1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
telegram-desktopsource(unstable)2.5.8+ds-1

Notes

https://0ffsecninja.github.io/Telegram:CVE-2021-2735.html

Search for package or bug name: Reporting problems