CVE-2020-25023

An issue was discovered in Noise-Java through 2020-08-27. AESGCMOnCtrCipherState.encryptWithAd allows out-of-bounds access...

CVE-2020-25023

Noise-Java contains an out-of-bounds access vulnerability in AESGCMOnCtrCipherState.encryptWithAd() (through 2020-08-27). The issue stems from incomplete/missing boundary checks, risking out-of-bounds reads/writes for large plaintext offsets, negative ciphertext offsets, or negative lengths. Docu...

CVE-2020-25023

An issue was discovered in Noise-Java through 2020-08-27. AESGCMOnCtrCipherState.encryptWithAd allows out-of-bounds access...

CVE-2020-25022

An issue was discovered in Noise-Java through 2020-08-27. AESGCMFallbackCipherState.encryptWithAd allows out-of-bounds access...

CVE-2020-25022

An issue was discovered in Noise-Java through 2020-08-27. AESGCMFallbackCipherState.encryptWithAd allows out-of-bounds access...

CVE-2020-25022

Noise-Java (AESGCMFallbackCipherState.encryptWithAd) suffers an out-of-bounds access due to incomplete boundary checks in encryptWithAd(), as reported for 2020-08-27 and earlier. The issue can cause out-of-bounds read/write with large plaintextOffset or negative ciphertextOffset/length, with JVM ...

CVE-2020-25021

CVE-2020-25021 affects Noise-Java: ChaChaPolyCipherState.encryptWithAd() contains incomplete/missing boundary checks, enabling out-of-bounds access. Descriptions across sources indicate potential out-of-bounds reads/writes when parameters like plaintextOffset, ciphertextOffset, or length are extr...

CVE-2020-25021

An issue was discovered in Noise-Java through 2020-08-27. ChaChaPolyCipherState.encryptWithAd allows out-of-bounds access...

CVE-2020-25021

An issue was discovered in Noise-Java through 2020-08-27. ChaChaPolyCipherState.encryptWithAd allows out-of-bounds access...

CVE-2020-25023: Out-of-bounds Read

An issue was discovered in Noise-Java through 2020-08-27. AESGCMOnCtrCipherState.encryptWithAd allows out-of-bounds access...

Noise-Java AESGCMOnCtrCipherState.encryptWithAd() Insufficient Boundary Checks

Vulnerability title: Noise-Java AESGCMOnCtrCipherState.encryptWithAd insufficient boundary checks Author: Pietro Oliva CVE: CVE-2020-25023 Vendor: Rhys Weatherley Creator of Noise Framework's reference implementation in Java Product: Noise-Java Affected version: No version information is currentl...

PT-2020-15895

Name of the Vulnerable Software and Affected Versions Noise-Java versions prior to 2020-08-27 Description An issue was discovered that allows out-of-bounds access through the ChaChaPolyCipherState.encryptWithAd function. Recommendations For Noise-Java versions prior to 2020-08-27, consider...

PT-2020-15896

Name of the Vulnerable Software and Affected Versions Noise-Java versions prior to 2020-08-27 Description An issue was discovered that allows out-of-bounds access through the encryptWithAd function in AESGCMFallbackCipherState. Recommendations For Noise-Java versions prior to 2020-08-27, at the...

CVE-2020-25021: Out-of-bounds Read

An issue was discovered in Noise-Java through 2020-08-27. ChaChaPolyCipherState.encryptWithAd allows out-of-bounds access...

PT-2020-15897

Name of the Vulnerable Software and Affected Versions Noise-Java versions prior to 2020-08-27 Description An issue was discovered that allows out-of-bounds access through the encryptWithAd function in AESGCMOnCtrCipherState. Recommendations For versions prior to 2020-08-27, at the moment, there i...

CVE-2020-25022: Out-of-bounds Read

An issue was discovered in Noise-Java through 2020-08-27. AESGCMFallbackCipherState.encryptWithAd allows out-of-bounds access...

Noise-Java ChaChaPolyCipherState.encryptWithAd() Insufficient Boundary Checks

Vulnerability title: Noise-Java ChaChaPolyCipherState.encryptWithAd insufficient boundary checks Author: Pietro Oliva CVE: CVE-2020-25021 Vendor: Rhys Weatherley Creator of Noise Framework's reference implementation in Java Product: Noise-Java Affected version: No version information is currently...