CVE-2020-1759: Reusing a Nonce, Key Pair in Encryption

A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the...

CVE-2019-1543

CVE-2019-1543 describes a nonce handling flaw in ChaCha20-Poly1305 within OpenSSL: accepting non-default nonce lengths up to 16 bytes with only the last 12 bytes considered, risking nonce reuse if an application sets a longer nonce and changes leading bytes. OpenSSL 1.1.1 and 1.1.0 are affected. ...

CVE-2019-1543: Use of a Broken or Risky Cryptographic Algorithm

ChaCha20-Poly1305 is an AEAD cipher, and requires a unique nonce input for every encryption operation. RFC 7539 specifies that the nonce value IV should be 96 bits 12 bytes. OpenSSL allows a variable nonce length and front pads the nonce with 0 bytes if it is less than 12 bytes. However it also...

CVE-2016-0533

CVE-2016-0533 concerns an unspecified vulnerability in the Oracle CRM Technical Foundation Messaging Component of Oracle E-Business Suite (versions 11.5.10.2 and 12.1.3). Based on connected CNVD-2016-00662, the issue affects the BIS Common portion of the Oracle CRM Technical Foundation and could ...