Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ugs.chromium.org/p/project-zero/issues/detail?id=2230&can=7&q=modified-after%3Atoday-30&sort=-modified&colspec=ID%20Type%20Status%20Priority%20Milestone%20Owner%20Summary%20Modified%20Cve&cells=tiles&redir=1 - https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=35306eb23814 - https://lore.kernel.org/netdev/20210929225750.2548112-1-eric.dumazet%40gmail.com/T/ - https://www.oracle.com/security-alerts/cpujul2022.html - https://security.netapp.com/advisory/ntap-20221111-0003/
CVE ID: CVE-2021-4204 State: PUBLISHED Published: 2022-08-24T00:00:00 Last Updated: 2024-08-03T17:16:04.362Z Vendors: n/a Products: kernel Problem Types: CWE-20 Description: An out-of-bounds (OOB) memory access flaw was found in the Linux kernel's eBPF due to an Improper Input Validation. This flaw allows a local attacker with a special privilege to crash the system or leak internal information. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2039178 - https://access.redhat.com/security/cve/CVE-2021-4204 - https://www.openwall.com/lists/oss-security/2022/01/11/4 - https://security-tracker.debian.org/tracker/CVE-2021-4204 - https://
/www.openwall.com/lists/oss-security/2022/01/11/4 - https://security-tracker.debian.org/tracker/CVE-2021-4204 - https://security.netapp.com/advisory/ntap-20221228-0003/
CVE ID: CVE-2021-4206 State: PUBLISHED Published: 2022-04-29T16:19:09.000Z Last Updated: 2025-03-21T18:03:39.948Z Vendors: n/a Products: QEMU Problem Types: CWE-190 Description: A flaw was found in the QXL display device emulation in QEMU. An integer overflow in the cursor_alloc() function can lead to the allocation of a small cursor object followed by a subsequent heap-based buffer overflow. This flaw allows a malicious privileged guest user to crash the QEMU process on the host or potentially execute arbitrary code within the context of the QEMU process. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2036998 - https://starlabs.s
t Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2036998 - https://starlabs.sg/advisories/21-4206/ - https://www.debian.org/security/2022/dsa-5133 - https://security.gentoo.org/glsa/202208-27 - https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html
CVE ID: CVE-2021-4207 State: PUBLISHED Published: 2022-04-29T16:07:33.000Z Last Updated: 2025-03-21T18:03:41.449Z Vendors: n/a Products: QEMU Problem Types: CWE-362 Description: A flaw was found in the QXL display device emulation in QEMU. A double fetch of guest controlled values `cursor->header.width` and `cursor->header.height` can lead to the allocation of a small cursor object followed by a subsequent heap-based buffer overflow. A malicious privileged guest user could use this flaw to crash the QEMU process on the host or potentially execute arbitrary code within the context of the QEMU process. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com
ontext of the QEMU process. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2036966 - https://starlabs.sg/advisories/21-4207/ - https://www.debian.org/security/2022/dsa-5133 - https://security.gentoo.org/glsa/202208-27 - https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html
CVE ID: CVE-2021-4208 State: PUBLISHED Published: 2022-02-21T10:45:57 Last Updated: 2024-08-03T17:16:04.256Z Vendors: Unknown Products: ExportFeed: List WooCommerce Products on eBay Store Problem Types: CWE-89 Description: The ExportFeed WordPress plugin through 2.0.1.0 does not sanitise and escape the product_id POST parameter before using it in a SQL statement, leading to a SQL injection vulnerability exploitable by high privilege users Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/0cf63b44-f709-4ba4-be14-1eea934c2007
CVE ID: CVE-2021-4209 State: PUBLISHED Published: 2022-08-24T15:07:31 Last Updated: 2024-08-03T17:16:04.444Z Vendors: n/a Products: GnuTLS Problem Types: CWE-476 Description: A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy, providing zero-length input may cause undefined behavior. This flaw leads to a denial of service after authentication in rare circumstances. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gnutls/gnutls/-/issues/1306 - https://bugzilla.redhat.com/show_bug.cgi?id=2044156 - https://access.redhat.com/security/cve/CVE-2021-4209 - https://gitlab.com/gnutls/gnutls/-/merge_requests/
i?id=2044156 - https://access.redhat.com/security/cve/CVE-2021-4209 - https://gitlab.com/gnutls/gnutls/-/merge_requests/1503 - https://gitlab.com/gnutls/gnutls/-/commit/3db352734472d851318944db13be73da61300568 - https://security.netapp.com/advisory/ntap-20220915-0005/
CVE ID: CVE-2021-4210 State: PUBLISHED Published: 2022-04-22T20:30:41 Last Updated: 2024-08-03T17:16:04.261Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: BIOS Problem Types: CWE-20 Description: A potential vulnerability in the SMI callback function used in the NVME driver in some Lenovo Desktop, ThinkStation, and ThinkEdge models may allow an attacker with local access and elevated privileges to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/LEN-77639
CVE ID: CVE-2021-4211 State: PUBLISHED Published: 2022-04-22T20:30:43 Last Updated: 2024-08-03T17:16:04.358Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: BIOS Problem Types: CWE-20 Description: A potential vulnerability in the SMI callback function used in the SMBIOS event log driver in some Lenovo Desktop, ThinkStation, and ThinkEdge models may allow an attacker with local access and elevated privileges to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/LEN-77639
CVE ID: CVE-2021-4212 State: PUBLISHED Published: 2022-04-22T20:30:44 Last Updated: 2024-08-03T17:16:04.273Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: BIOS Problem Types: CWE-20 Description: A potential vulnerability in the SMI callback function used in the Legacy BIOS mode driver in some Lenovo Notebook models may allow an attacker with local access and elevated privileges to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/LEN-77639
CVE ID: CVE-2021-4213 State: PUBLISHED Published: 2022-08-24T15:07:48 Last Updated: 2024-08-03T17:16:04.486Z Vendors: n/a Products: JSS Problem Types: CWE-401 Description: A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the server memory, saturating the server’s RAM. This flaw allows an attacker to force the invocation of an out-of-memory process, causing a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2042900 - https://access.redhat.com/security/cve/CVE-2021-4213 - https://security-tracker.debian.org/tracker/CVE-2021-4213 - https://github.com/dog
dhat.com/security/cve/CVE-2021-4213 - https://security-tracker.debian.org/tracker/CVE-2021-4213 - https://github.com/dogtagpki/jss/commit/5922560a78d0dee61af8a33cc9cfbf4cfa291448 - https://github.com/dogtagpki/jss/commit/3aabe0e9d59b0a42e68ac8cd0468f9c5179967d2
CVE ID: CVE-2021-4214 State: PUBLISHED Published: 2022-08-24T00:00:00 Last Updated: 2024-08-03T17:16:04.244Z Vendors: n/a Products: libpng Problem Types: CWE-120 Description: A heap overflow flaw was found in libpngs' pngimage.c program. This flaw allows an attacker with local network access to pass a specially crafted PNG file to the pngimage utility, causing an application to crash, leading to a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/glennrp/libpng/issues/302 - https://bugzilla.redhat.com/show_bug.cgi?id=2043393 - https://access.redhat.com/security/cve/CVE-2021-4214 - https://security-tracker.debian.org/tracker/CVE-2021-4214 -
393 - https://access.redhat.com/security/cve/CVE-2021-4214 - https://security-tracker.debian.org/tracker/CVE-2021-4214 - https://security.netapp.com/advisory/ntap-20221020-0001/
CVE ID: CVE-2021-4215 State: REJECTED Published: 2022-08-26T15:25:42 Last Updated: 2022-08-26T15:25:42 Description: No description available.
CVE ID: CVE-2021-4216 State: PUBLISHED Published: 2022-08-26T15:25:43 Last Updated: 2024-08-03T17:16:04.307Z Vendors: n/a Products: mupdf Problem Types: CWE-369 Description: A Floating point exception (division-by-zero) flaw was found in Mupdf for zero width pages in muraster.c. It is fixed in Mupdf-1.20.0-rc1 upstream. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.ghostscript.com/show_bug.cgi?id=704834 - https://github.com/ArtifexSoftware/mupdf/commit/22c47acbd52949421f8c7cb46ea1556827d0fcbf
CVE ID: CVE-2021-4217 State: PUBLISHED Published: 2022-08-24T15:08:43 Last Updated: 2024-08-03T17:16:04.487Z Vendors: n/a Products: unzip Problem Types: CWE-476 Description: A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer dereference. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/ubuntu/+source/unzip/+bug/1957077 - https://bugzilla.redhat.com/show_bug.cgi?id=2044583 - https://access.redhat.com/security/cve/CVE-2021-4217
CVE ID: CVE-2021-4218 State: PUBLISHED Published: 2022-08-24T15:08:25 Last Updated: 2024-08-03T17:16:04.299Z Vendors: n/a Products: kernel Problem Types: CWE-665 Description: A flaw was found in the Linux kernel’s implementation of reading the SVC RDMA counters. Reading the counter sysctl panics the system. This flaw allows a local attacker with local access to cause a denial of service while the system reboots. The issue is specific to CentOS/RHEL. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.centos.org/view.php?id=18395 - https://bugzilla.redhat.com/show_bug.cgi?id=2048359 - https://access.redhat.com/security/cve/CVE-2021-4218
CVE ID: CVE-2021-4219 State: PUBLISHED Published: 2022-03-23T19:46:17 Last Updated: 2024-08-03T17:16:04.364Z Vendors: n/a Products: imagemagick Problem Types: CWE-20 Description: A flaw was found in ImageMagick. The vulnerability occurs due to improper use of open functions and leads to a denial of service. This flaw allows an attacker to crash the system. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2054611
CVE ID: CVE-2021-4220 State: REJECTED Published: 2022-02-16T16:38:34 Last Updated: 2022-02-16T16:38:34 Description: No description available.
CVE ID: CVE-2021-4221 State: PUBLISHED Published: 2022-12-22T00:00:00.000Z Last Updated: 2025-04-16T15:49:45.732Z Vendors: Mozilla Products: Firefox Problem Types: Address bar spoofing on Firefox for Android due to RTL characters Description: If a domain name contained a RTL character, it would cause the domain to be rendered to the right of the path. This could lead to user confusion and spoofing attacks. <br>*This bug only affects Firefox for Android. Other operating systems are unaffected.*<br>*Note*: Due to a clerical error this advisory was not included in the original announcement, and was added in Feburary 2022. This vulnerability affects Firefox < 92. Additional Analyst Notes: - CVE
announcement, and was added in Feburary 2022. This vulnerability affects Firefox < 92. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2021-38/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1704422
CVE ID: CVE-2021-4222 State: PUBLISHED Published: 2022-02-28T09:06:40 Last Updated: 2024-08-03T17:16:04.262Z Vendors: Unknown Products: WP-Paginate Problem Types: CWE-79 Description: The WP-Paginate WordPress plugin before 2.1.4 does not sanitise and escape its preset settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/6df5f5b1-f10b-488e-80b3-2c024bbb8c78 - https://packetstormsecurity.com/files/160800/
CVE ID: CVE-2021-4225 State: PUBLISHED Published: 2022-04-25T15:50:53 Last Updated: 2024-08-03T17:16:04.292Z Vendors: Unknown Products: SP Project & Document Manager Problem Types: CWE-434 Description: The SP Project & Document Manager WordPress plugin before 4.24 allows any authenticated users, such as subscribers, to upload files. The plugin attempts to prevent PHP and other similar files that could be executed on the server from being uploaded by checking the file extension. It was discovered that on Windows servers, the security checks in place were insufficient, enabling bad actors to potentially upload backdoors on vulnerable sites. Additional Analyst Notes: - CVE Program Container: Re
ng bad actors to potentially upload backdoors on vulnerable sites. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/bd1083d1-edcc-482e-a8a9-c8b6c8d417bd - https://github.com/pang0lin/CVEproject/blob/main/wordpress_SP-Project_fileupload.md
CVE ID: CVE-2021-4226 State: PUBLISHED Published: 2022-12-15T17:14:40.696Z Last Updated: 2025-04-21T14:18:04.471Z Vendors: Unknown Products: RSFirewall! Problem Types: CWE-639 Authorization Bypass Through User-Controlled Key Description: RSFirewall tries to identify the original IP address by looking at different HTTP headers. A bypass is possible due to the way it is implemented. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/c0ed80c8-ebbf-4ed9-b02f-31660097c352
CVE ID: CVE-2021-4227 State: PUBLISHED Published: 2024-01-16T15:52:25.423Z Last Updated: 2025-06-02T15:10:29.086Z Vendors: Unknown Products: ark-commenteditor Problem Types: CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) Description: The ark-commenteditor WordPress plugin through 2.15.6 does not properly sanitise or encode the comments when in Source editor, allowing attackers to inject an iFrame in the page and thus load arbitrary content from any page to the comment section Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/8d015eba-31dc-44cb-a051-4e95df782b75/
CVE ID: CVE-2021-4228 State: PUBLISHED Published: 2022-10-24T00:00:00.000Z Last Updated: 2025-05-05T20:28:17.148Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Lanner Inc Products: IAC-AST2500A Problem Types: CWE-321 Description: Use of hard-coded TLS certificate by default allows an attacker to perform Man-in-the-Middle (MitM) attacks even in the presence of the HTTPS connection. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.00.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-iot-device-security-part-1/ - http
nces: - https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-iot-device-security-part-1/ - https://www.nozominetworks.com/labs/vulnerability-advisories/cve-2021-4228/
CVE ID: CVE-2021-4229 State: PUBLISHED Published: 2022-05-24T15:30:35.000Z Last Updated: 2025-04-15T14:38:30.138Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: unspecified Products: ua-parser-js Problem Types: CWE-912 Description: A vulnerability was found in ua-parser-js 0.7.29/0.8.0/1.0.0. It has been rated as critical. This issue affects the crypto mining component which introduces a backdoor. Upgrading to version 0.7.30, 0.8.1 and 1.0.1 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/advisories/GHSA-pjwm-rvh2-c8
t Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/advisories/GHSA-pjwm-rvh2-c87w - https://github.com/faisalman/ua-parser-js/issues/536 - https://vuldb.com/?id.185453
CVE ID: CVE-2021-4230 State: PUBLISHED Published: 2022-05-24T16:10:13.000Z Last Updated: 2025-04-15T14:38:21.609Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: unspecified Products: Airfield Online Problem Types: CWE-287 Description: A vulnerability has been found in Airfield Online and classified as problematic. This vulnerability affects the path /backups/ of the MySQL backup handler. An attacker is able to get access to sensitive data without proper authentication. It is recommended to the change the configuration settings. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.183172
CVE ID: CVE-2021-4231 State: PUBLISHED Published: 2022-05-26T07:10:14.000Z Last Updated: 2025-04-15T14:38:13.128Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: unspecified Products: Angular Problem Types: CWE-79 Description: A vulnerability was found in Angular up to 11.0.4/11.1.0-next.2. It has been classified as problematic. Affected is the handling of comments. The manipulation leads to cross site scripting. It is possible to launch the attack remotely but it might require an authentication first. Upgrading to version 11.0.5 and 11.1.0-next.3 is able to address this issue. The name of the patch is ba8da742e3b243e8f43d4c63aa842b44e14f2b09. It is recommended
xt.3 is able to address this issue. The name of the patch is ba8da742e3b243e8f43d4c63aa842b44e14f2b09. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/angular/angular/issues/40136 - https://github.com/angular/angular/commit/ba8da742e3b243e8f43d4c63aa842b44e14f2b09 - https://security.snyk.io/vuln/SNYK-JS-ANGULARCORE-1070902 - https://vuldb.com/?id.181356
CVE ID: CVE-2021-4232 State: PUBLISHED Published: 2022-05-26T17:05:10.000Z Last Updated: 2025-04-15T14:38:00.995Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: unspecified Products: Zoo Management System Problem Types: CWE-79 Description: A vulnerability classified as problematic has been found in Zoo Management System 1.0. Affected is an unknown function of the file admin/manage-ticket.php. The manipulation with the input <script>alert(1)</script> leads to cross site scripting. It is possible to launch the attack remotely. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.178254
CVE ID: CVE-2021-4234 State: PUBLISHED Published: 2022-07-06T19:10:17 Last Updated: 2024-08-03T17:23:09.056Z Vendors: n/a Products: OpenVPN Access Server Problem Types: CWE-406 Description: OpenVPN Access Server 2.10 and prior versions are susceptible to resending multiple packets in a response to a reset packet sent from the client which the client again does not respond to, resulting in a limited amplification attack. Additional Analyst Notes: - CVE Program Container: References: - https://openvpn.net/vpn-server-resources/release-notes/#openvpn-access-server-2-11-0
CVE ID: CVE-2021-4235 State: PUBLISHED Published: 2022-12-27T21:13:42.393Z Last Updated: 2025-04-11T16:25:11.371Z Vendors: gopkg.in/yaml.v2, github.com/go-yaml/yaml Products: gopkg.in/yaml.v2, github.com/go-yaml/yaml Problem Types: CWE 400: Uncontrolled Resource Consumption Description: Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be used as a denial of service vector. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/go-yaml/yaml/pull/375 - https://github.com/go-yaml/yaml/commit/bb4e33bf68bf89cad44d386192cbed201f35b241 -
://github.com/go-yaml/yaml/pull/375 - https://github.com/go-yaml/yaml/commit/bb4e33bf68bf89cad44d386192cbed201f35b241 - https://pkg.go.dev/vuln/GO-2021-0061 - https://lists.debian.org/debian-lts-announce/2023/07/msg00001.html
CVE ID: CVE-2021-4236 State: PUBLISHED Published: 2022-12-27T21:13:45.711Z Last Updated: 2025-04-11T16:20:55.821Z Vendors: github.com/ecnepsnai/web Products: github.com/ecnepsnai/web Problem Types: CWE-400: Uncontrolled Resource Consumption Description: Web Sockets do not execute any AuthenticateMethod methods which may be set, leading to a nil pointer dereference if the returned UserData pointer is assumed to be non-nil, or authentication bypass. This issue only affects WebSockets with an AuthenticateMethod hook. Request handlers that do not explicitly use WebSockets are not vulnerable. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.
ot vulnerable. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ecnepsnai/web/commit/5a78f8d5c41ce60dcf9f61aaf47a7a8dc3e0002f - https://pkg.go.dev/vuln/GO-2021-0107
CVE ID: CVE-2021-4237 State: REJECTED Published: N/A Last Updated: 2024-06-13T14:37:21.513Z Description: No description available.
CVE ID: CVE-2021-4238 State: PUBLISHED Published: 2022-12-27T21:13:50.373Z Last Updated: 2025-04-11T16:17:46.299Z Vendors: github.com/Masterminds/goutils Products: github.com/Masterminds/goutils Problem Types: CWE 330: Use of Insufficiently Random Values Description: Randomly-generated alphanumeric strings contain significantly less entropy than expected. The RandomAlphaNumeric and CryptoRandomAlphaNumeric functions always return strings containing at least one digit from 0 to 9. This significantly reduces the amount of entropy in short strings generated by these functions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Mastermind
Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Masterminds/goutils/commit/869801f20f9f1e7ecdbdb6422049d8241270d5e1 - https://pkg.go.dev/vuln/GO-2022-0411
CVE ID: CVE-2021-4239 State: PUBLISHED Published: 2022-12-27T21:13:53.590Z Last Updated: 2025-04-14T16:59:43.688Z Vendors: github.com/flynn/noise Products: github.com/flynn/noise Problem Types: CWE 400: Uncontrolled Resource Consumption Description: The Noise protocol implementation suffers from weakened cryptographic security after encrypting 2^64 messages, and a potential denial of service attack. After 2^64 (~18.4 quintillion) messages are encrypted with the Encrypt function, the nonce counter will wrap around, causing multiple messages to be encrypted with the same key and nonce. In a separate issue, the Decrypt function increments the nonce state even when it fails to decrypt a message.
and nonce. In a separate issue, the Decrypt function increments the nonce state even when it fails to decrypt a message. If an attacker can provide an invalid input to the Decrypt function, this will cause the nonce state to desynchronize between the peers, resulting in a failure to encrypt all subsequent messages. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/flynn/noise/pull/44 - https://pkg.go.dev/vuln/GO-2022-0425