Lucene search
+L

4 matches found

osv_go
osv_go
•added 2025/05/15 8:00 p.m.•24 views

GO-2025-3678 Ring: some aes functions may panic when overflow checking is enabled in ring in github.com/briansmith/ring

Ring: some aes functions may panic when overflow checking is enabled in ring in github.com/briansmith/ring...

5.3CVSS7.2AI score0.01029EPSS
SaveExploits0References8
osv_ghsa
osv_ghsa
•added 2025/05/09 6:30 p.m.•34 views

GHSA-C86P-W88R-QVQR Duplicate Advisory: ring has some AES functions that may panic when overflow checking is enabled in

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-4p46-pwfr-66x6. This link is maintained to preserve external references. Original Description A flaw was found in Rust's Ring package. A panic may be triggered when overflow checking is enabled. In the QUIC...

5.3CVSS6.8AI score0.01029EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
•added 2025/03/07 4:23 p.m.•40 views

Some AES functions may panic when overflow checking is enabled in ring

ring::aead::quic::HeaderProtectionKey::newmask may panic when overflow checking is enabled. In the QUIC protocol, an attacker can induce this panic by sending a specially-crafted packet. Even unintentionally it is likely to occur in 1 out of every 232 packets sent and/or received. On 64-bit targe...

5.3CVSS7.1AI score0.01029EPSS
SaveExploits0References8Affected Software1
osv_rustsec
osv_rustsec
•added 2025/03/06 12:00 p.m.•43 views

RUSTSEC-2025-0009 Some AES functions may panic when overflow checking is enabled.

ring::aead::quic::HeaderProtectionKey::newmask may panic when overflow checking is enabled. In the QUIC protocol, an attacker can induce this panic by sending a specially-crafted packet. Even unintentionally it is likely to occur in 1 out of every 232 packets sent and/or received. On 64-bit targe...

5.3CVSS7.1AI score0.01029EPSS
SaveExploits0References3
Rows per page
Query Builder