| Known vulnerability in any VM template THREATQW22 |
mitigated |
12 high |
6 medium |
Autoupdate all VMs; grsecurity in all Debian templates |
| Malicious VM template THREATQW28 |
mitigated |
6 medium |
6 medium |
|
| Side-channel analysis or exfiltration of GPG keys or other sensitive data THREATQW29 |
partially mitigated |
6 medium |
6 medium |
Use non-networked disposible VMs for opening all decrypted files. |
| Admin error in provisioning of the workstation THREATQW31 |
inform |
6 medium |
6 medium |
|
| Plaintext submissions exfiltrated THREATQW40 |
partially mitigated |
6 medium |
6 medium |
sd-proxy has server hardcoded; sd-client running in non networked VM |
| Vulnerability introduced to AppVMs via Template dependency THREATQW58 |
partially mitigated |
6 medium |
6 medium |
grsecurity in all Debian templates; create individual templates for each role in workstation to minimize unnecessary package installs |
| Attacker obtains code execution in any VM THREATQW36 |
partially mitigated |
6 medium |
4 medium |
Default Qubes-RPC deny policy; grsecurity in all Debian templates |
| Information disclosure (Xen vulnerability) THREATQW21 |
accepted |
4 medium |
4 medium |
|
| Journalist Interface credentials exfiltrated (passphrase, single code, username), and API token THREATQW38 |
partially mitigated |
4 medium |
4 medium |
sd-client running in non networked VM |
| User error while operating the workstation THREATQW19 |
partially mitigated |
9 high |
3 low |
|
| Unknown vulnerability in a VM template THREATQW10 |
mitigated |
6 medium |
3 low |
grsecurity in all Debian templates |
| Privilege escalation (Xen vulnerability) THREATQW11 |
accepted |
6 medium |
3 low |
grsecurity in all Debian templates |
| Attacker obtains code execution in the sd-app VM THREATQW18 |
mitigated |
6 medium |
3 low |
grsecurity in all Debian templates |
| Zip bomb THREATQW53 |
partially mitigated |
3 low |
3 low |
|
| Injection vulnerability in securedrop-client THREATQW9 |
mitigated |
9 high |
2 low |
Use non-networked disposible VMs for opening all decrypted files. |
| Adversary exploits gzip parsing to get code execution THREATQW37 |
accepted |
3 low |
2 low |
sd-client running in non networked VM; grsecurity in all Debian templates |
| Large file DoS in client THREATQW57 |
partially mitigated |
3 low |
2 low |
Forms use WTForms validators |
| DoS (Xen vulnerability) THREATQW3 |
accepted |
2 low |
2 low |
|
| Compromised VM spoofs log origin THREATQW56 |
accepted |
2 low |
2 low |
|
| Inter-vm covert channels (e.g. CPU cache) used for exfiltration THREATQW48 |
accepted |
Unknown |
Unknown |
|
| Code injection via messages into App render process THREATQW62 |
unmanaged |
Unknown |
Unknown |
|
| Malicious message plaintext is stored in database THREATQW63 |
unmanaged |
Unknown |
Unknown |
|
| Code injection via malicious attachments in App THREATQW64 |
unmanaged |
Unknown |
Unknown |
|
| Malware via malicious attachments in App THREATQW65 |
unmanaged |
Unknown |
Unknown |
|
| Data loss because of risk mitigations like sanatization THREATQW66 |
unmanaged |
Unknown |
Unknown |
|