Lucene search
+L

2 matches found

OSV
OSV
added 2021/04/06 5:22 p.m.17 views

GHSA-W3HJ-WR2Q-X83G Discovery uses the same AES/GCM Nonce throughout the session

Discovery uses the same AES/GCM Nonce throughout the session though it should be generated on per message basis which can lead to the leaking of the session key. As the actual ENR record is signed with a different key it is not possible for an attacker to alter the ENR record. Note that the node...

5.3CVSS5.2AI score0.00489EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2021/04/06 5:22 p.m.45 views

Discovery uses the same AES/GCM Nonce throughout the session

Discovery uses the same AES/GCM Nonce throughout the session though it should be generated on per message basis which can lead to the leaking of the session key. As the actual ENR record is signed with a different key it is not possible for an attacker to alter the ENR record. Note that the node...

5.3CVSS1.4AI score0.00489EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder