Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:47118
HistoryMay 22, 2024 - 9:14 a.m.

IV Collision

2024-05-2209:14:23
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
github
vulnerability
iv collision
random iv
nist sp 800-38d
plaintext
encryption
attackers

AI Score

7

Confidence

High

github.com/bincyber/go-sqlcrypter is vulnerable to IV Collision. The vulnerability is due to using a random IV, which can exceed the safe limit of encrypting plaintext above 2^32 in size under the same key as stated by NIST SP 800-38D, potentially allowing attackers to decrypt messages if IV collision occurs.

AI Score

7

Confidence

High