Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2022/02/15 1:57 a.m.22 views

flynn/noise has improper nonce handling yielding potential state DoS

The Go package github.com/flynn/noise, a Noise Protocol implementation, has two bugs in nonce handling in versions prior to v1.0.0. Issue 1: Potential nonce overflow If 264 18.4 quintillion or more messages are encrypted with Encrypt after handshaking, the nonce counter will wrap around, causing...

7.3AI score
SaveExploits0References4Affected Software1
OSV
OSV
added 2022/02/15 1:57 a.m.70 views

GHSA-G9MP-8G3H-3C5C flynn/noise has improper nonce handling yielding potential state DoS

The Go package github.com/flynn/noise, a Noise Protocol implementation, has two bugs in nonce handling in versions prior to v1.0.0. Issue 1: Potential nonce overflow If 264 18.4 quintillion or more messages are encrypted with Encrypt after handshaking, the nonce counter will wrap around, causing...

7.5CVSS7.8AI score0.00354EPSS
SaveExploits0References4
Rows per page
Query Builder