CVE-2021-4239

2022-12-2722:15:12

CWE-311

web.nvd.nist.gov

cve-2021-4239

noise protocol

crypto security

dos attack

nvd

vulnerability

encryption

nonce counter

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

0.001

Percentile

34.6%

JSON

The Noise protocol implementation suffers from weakened cryptographic security after encrypting 2^64 messages, and a potential denial of service attack. After 2^64 (~18.4 quintillion) messages are encrypted with the Encrypt function, the nonce counter will wrap around, causing multiple messages to be encrypted with the same key and nonce. In a separate issue, the Decrypt function increments the nonce state even when it fails to decrypt a message. If an attacker can provide an invalid input to the Decrypt function, this will cause the nonce state to desynchronize between the peers, resulting in a failure to encrypt all subsequent messages.

Affected configurations

Nvd

Node

noiseprotocolnoiseMatch-go

VendorProductVersionCPE
noiseprotocolnoise-cpe:2.3:a:noiseprotocol:noise:-:*:*:*:*:go:*:*

Vendor	Product	Version	CPE
noiseprotocol	noise	-	cpe:2.3:a:noiseprotocol:noise:-:::::go::

CNA Affected

[
  {
    "vendor": "github.com/flynn/noise",
    "product": "github.com/flynn/noise",
    "collectionURL": "https://pkg.go.dev",
    "packageName": "github.com/flynn/noise",
    "versions": [
      {
        "version": "0",
        "lessThan": "1.0.0",
        "status": "affected",
        "versionType": "semver"
      }
    ],
    "programRoutines": [
      {
        "name": "CipherState.Encrypt"
      },
      {
        "name": "CipherState.Decrypt"
      },
      {
        "name": "symmetricState.EncryptAndHash"
      },
      {
        "name": "HandshakeState.ReadMessage"
      },
      {
        "name": "HandshakeState.WriteMessage"
      },
      {
        "name": "symmetricState.DecryptAndHash"
      }
    ],
    "defaultStatus": "unaffected"
  }
]