Lucene search
K

20 matches found

OSV
OSV
added 2026/01/27 11:38 p.m.4 views

CVE-2026-24785 Clatter has a PSK Validity Rule Violation issue

Clatter is a nostd compatible, pure Rust implementation of the Noise protocol framework with post-quantum support. Versiosn prior to2.2.0 have a protocol compliance vulnerability. The library allowed post-quantum handshake patterns that violated the PSK validity rule Noise Protocol Framework...

9.3CVSS5.8AI score0.00014EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/01/27 11:38 p.m.3 views

CVE-2026-24785 Clatter has a PSK Validity Rule Violation issue

Clatter is a nostd compatible, pure Rust implementation of the Noise protocol framework with post-quantum support. Versiosn prior to2.2.0 have a protocol compliance vulnerability. The library allowed post-quantum handshake patterns that violated the PSK validity rule Noise Protocol Framework...

9.3CVSS5.8AI score0.00014EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/01/27 11:38 p.m.30 views

CVE-2026-24785 Clatter has a PSK Validity Rule Violation issue

Clatter is a nostd compatible, pure Rust implementation of the Noise protocol framework with post-quantum support. Versiosn prior to2.2.0 have a protocol compliance vulnerability. The library allowed post-quantum handshake patterns that violated the PSK validity rule Noise Protocol Framework...

9.3CVSS0.00014EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-7529

Malicious code in bioql PyPI...

7.5CVSS7.5AI score0.00126EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2021-4239

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Noise protocol implementation suffers from weakened cryptographic security after encrypting 2^64 messages, and a potential denial of service attack. After...

7.5CVSS7.1AI score0.00126EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/07/27 12:0 a.m.2 views

snow crate 安全漏洞

snow crate is a Rust implementation of the Noise Protocol Framework by the individual developer Jake McGinty. A security vulnerability exists in snow crate versions prior to 0.9.5, which stems from the use of stateful TransportState that can lead to message delivery rejection...

4.3CVSS6.3AI score0.00231EPSS
Exploits0References4
OSV
OSV
added 2022/12/28 12:30 a.m.10 views

GHSA-6CR6-FMVC-VW2P Noise vulnerable to denial of service

Noise is a Go implementation of the Noise Protocol Framework. The Noise protocol implementation suffers from weakened cryptographic security after encrypting 2^64 messages, and a potential denial of service attack. After 2^64 18.4 quintillion messages are encrypted with the Encrypt function, the...

7.7CVSS7.3AI score0.00126EPSS
Exploits0References5
Github Security Blog
Github Security Blog
added 2022/12/28 12:30 a.m.13 views

Noise vulnerable to denial of service

Noise is a Go implementation of the Noise Protocol Framework. The Noise protocol implementation suffers from weakened cryptographic security after encrypting 2^64 messages, and a potential denial of service attack. After 2^64 18.4 quintillion messages are encrypted with the Encrypt function, the...

7.5CVSS3.6AI score0.00126EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2022/12/27 10:15 p.m.1 views

CVE-2021-4239

The Noise protocol implementation suffers from weakened cryptographic security after encrypting 2^64 messages, and a potential denial of service attack. After 2^64 18.4 quintillion messages are encrypted with the Encrypt function, the nonce counter will wrap around, causing multiple messages to b...

7.5CVSS5.8AI score
Exploits0References2
NVD
NVD
added 2022/12/27 10:15 p.m.6 views

CVE-2021-4239

The Noise protocol implementation suffers from weakened cryptographic security after encrypting 2^64 messages, and a potential denial of service attack. After 2^64 18.4 quintillion messages are encrypted with the Encrypt function, the nonce counter will wrap around, causing multiple messages to b...

7.5CVSS0.00126EPSS
Exploits0References2
OSV
OSV
added 2022/12/27 10:15 p.m.1 views

UBUNTU-CVE-2021-4239

The Noise protocol implementation suffers from weakened cryptographic security after encrypting 2^64 messages, and a potential denial of service attack. After 2^64 18.4 quintillion messages are encrypted with the Encrypt function, the nonce counter will wrap around, causing multiple messages to b...

7.5CVSS5.8AI score0.00126EPSS
Exploits0References4
UbuntuCve
UbuntuCve
added 2022/12/27 10:15 p.m.18 views

CVE-2021-4239

The Noise protocol implementation suffers from weakened cryptographic security after encrypting 2^64 messages, and a potential denial of service attack. After 2^64 18.4 quintillion messages are encrypted with the Encrypt function, the nonce counter will wrap around, causing multiple messages to b...

7.5CVSS7AI score0.00126EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2022/12/27 9:13 p.m.15 views

CVE-2021-4239

The Noise protocol implementation suffers from weakened cryptographic security after encrypting 2^64 messages, and a potential denial of service attack. After 2^64 18.4 quintillion messages are encrypted with the Encrypt function, the nonce counter will wrap around, causing multiple messages to b...

7.5CVSS7.3AI score0.00126EPSS
Exploits0
CVE
CVE
added 2022/12/27 9:13 p.m.104 views

CVE-2021-4239

The CVE-2021-4239 issue concerns the Noise protocol implementation (notably the Go language package by Flynn). Affected behavior: after encrypting 2^64 messages, the nonce counter can wrap, causing multiple messages to be encrypted with the same key and nonce, enabling weakened cryptographic secu...

7.5CVSS7.3AI score0.00126EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2022/12/27 12:0 a.m.1 views

noise 安全漏洞

noise is a Flynn open source Go package that implements the noise protocol framework. A security vulnerability exists in noise, which stems from a weakened cryptographic security of the Noise Protocol implementation after encrypting 2^64 messages, and a potential denial-of-service attack...

7.5CVSS7.2AI score0.00126EPSS
Exploits0References3
OSV
OSV
added 2022/02/15 1:57 a.m.13 views

GO-2022-0425 Weak encryption and denial of service in github.com/flynn/noise

The Noise protocol implementation suffers from weakened cryptographic security after encrypting 2^64 messages, and a potential denial of service attack. After 2^64 18.4 quintillion messages are encrypted with the Encrypt function, the nonce counter will wrap around, causing multiple messages to b...

7.5CVSS7.3AI score0.00126EPSS
Exploits0References1
Github Security Blog
Github Security Blog
added 2022/02/15 1:57 a.m.14 views

flynn/noise has improper nonce handling yielding potential state DoS

The Go package github.com/flynn/noise, a Noise Protocol implementation, has two bugs in nonce handling in versions prior to v1.0.0. Issue 1: Potential nonce overflow If 264 18.4 quintillion or more messages are encrypted with Encrypt after handshaking, the nonce counter will wrap around, causing...

7.3AI score
Exploits0References4Affected Software1
OSV
OSV
added 2022/02/15 1:57 a.m.14 views

GHSA-G9MP-8G3H-3C5C flynn/noise has improper nonce handling yielding potential state DoS

The Go package github.com/flynn/noise, a Noise Protocol implementation, has two bugs in nonce handling in versions prior to v1.0.0. Issue 1: Potential nonce overflow If 264 18.4 quintillion or more messages are encrypted with Encrypt after handshaking, the nonce counter will wrap around, causing...

7.5CVSS7.8AI score0.00126EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2022/02/15 12:0 a.m.1 views

PT-2022-11591 · Noise · Noise

Name of the Vulnerable Software and Affected Versions: github.com/flynn/noise versions prior to v1.0.0 Description: The Noise protocol implementation has weakened cryptographic security after encrypting 2^64 messages and is vulnerable to a potential denial of service attack. After 2^64 messages a...

7.5CVSS7.2AI score0.00126EPSS
Exploits0References14
CNVD
CNVD
added 2020/09/07 12:0 a.m.1 views

Noise-Java Out-of-Bounds Access Vulnerability (CNVD-2020-52372)

Noise-Java is a plain Java implementation of the Noise protocol. An out-of-bounds access vulnerability exists in ChaChaPolyCipherState.encryptWithAd in Noise-Java 2020-08-27 and earlier versions. No detailed vulnerability details are provided at this time...

9.8CVSS6.9AI score0.00633EPSS
Exploits2References1
Rows per page
Query Builder