Vulnerability Description
The Noise protocol implementation suffers from weakened cryptographic security after encrypting 2^64 messages, and a potential denial of service attack. After 2^64 (~18.4 quintillion) messages are encrypted with the Encrypt function, the nonce counter will wrap around, causing multiple messages to be encrypted with the same key and nonce. In a separate issue, the Decrypt function increments the nonce state even when it fails to decrypt a message. If an attacker can provide an invalid input to the Decrypt function, this will cause the nonce state to desynchronize between the peers, resulting in a failure to encrypt all subsequent messages.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Noiseprotocol | Noise | - |
Related Weaknesses (CWE)
References
- https://github.com/flynn/noise/pull/44PatchThird Party Advisory
- https://pkg.go.dev/vuln/GO-2022-0425PatchVendor Advisory
- https://github.com/flynn/noise/pull/44PatchThird Party Advisory
- https://pkg.go.dev/vuln/GO-2022-0425PatchVendor Advisory
FAQ
What is CVE-2021-4239?
CVE-2021-4239 is a vulnerability with a CVSS score of 7.5 (HIGH). The Noise protocol implementation suffers from weakened cryptographic security after encrypting 2^64 messages, and a potential denial of service attack. After 2^64 (~18.4 quintillion) messages are enc...
How severe is CVE-2021-4239?
CVE-2021-4239 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-4239?
Check the references section above for vendor advisories and patch information. Affected products include: Noiseprotocol Noise.