4 matches found
CVE-2022-24759
@chainsafe/libp2p-noise contains TypeScript implementation of noise protocol, an encryption protocol used in libp2p. @chainsafe/libp2p-noise before 4.1.2 and 5.0.3 does not correctly validate signatures during the handshake process. This may allow a man-in-the-middle to pose as other peers and ge...
CVE-2022-24759 Failure to validate signature during handshake in @chainsafe/libp2p-noise
@chainsafe/libp2p-noise contains TypeScript implementation of noise protocol, an encryption protocol used in libp2p. @chainsafe/libp2p-noise before 4.1.2 and 5.0.3 does not correctly validate signatures during the handshake process. This may allow a man-in-the-middle to pose as other peers and ge...
CVE-2022-24759
In CVE-2022-24759, the @chainsafe/libp2p-noise TypeScript implementation fails to validate signatures during the handshake, enabling a potential man-in-the-middle impersonation of peers and subsequent banning. Affected versions are before 4.1.2 and 5.0.3. The documented remediation is to upgrade ...
CVE-2022-24759 Failure to validate signature during handshake in @chainsafe/libp2p-noise
@chainsafe/libp2p-noise contains TypeScript implementation of noise protocol, an encryption protocol used in libp2p. @chainsafe/libp2p-noise before 4.1.2 and 5.0.3 does not correctly validate signatures during the handshake process. This may allow a man-in-the-middle to pose as other peers and ge...