Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:38831
HistoryJan 11, 2023 - 5:54 a.m.

Uncontrolled Resource Consumption

2023-01-1105:54:52
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
github
noise
uncontrolled resource consumption
cryptographic security
nonce
denial of service
decrypt function
failure
software

EPSS

0.001

Percentile

34.6%

github.com/flynn/noise is vulnerable to uncontrolled resource consumption. The weakened cryptographic security after encrypting 2^64 messages causes multiple messages to be encrypted with the same key and nonce resulting in denial of service conditions. Additionally the Decrypt function increments the nonce state even when it fails to decrypt a message, resulting in a failure to encrypt all subsequent messages.

EPSS

0.001

Percentile

34.6%