CVE-2023-1732
Assigner: cloudflare
Published: 2023-05-10T11:41:53.902Z
State: PUBLISHED
affected: collectionURL: https://github.com/cloudflare/circl
defaultStatus: unaffected
platforms: Go
product: CIRCL
vendor: Cloudflare
versions: lessThan: <1.3.3
status: affected
version: 0
versionType: semver
credits: type: finder
user: 00000000-0000-4000-9000-000000000000
value: Tom Thorogood
descriptions: supportingMedia: base64: no
type: text/html
value: <p>When sampling randomness for a shared secret, the implementation of Kyber and FrodoKEM, did not check whether <code>crypto/rand.Read()</code>&nbsp;returns an error. In rare deployment cases (error thrown by the <code>Read()</code>&nbsp;function), this could lead to a predictable shared secret.</p><p>The tkn20 and blindrsa components did not check whether enough randomness was returned from the user provided randomness source. Typically the user provides <code>crypto/rand.Reader</code>, which in the vast majority of cases will always return the right number random bytes. In the cases where it does not, or the user provides a source that does not, the blinding for blindrsa is weak and integrity of the plaintext is not ensured in tkn20.</p>
value: When sampling randomness for a shared secret, the implementation of Kyber and FrodoKEM, did not check whether crypto/rand.Read() returns an error. In rare deployment cases (error thrown by the Read() function), this could lead to a predictable shared secret.

The tkn20 and blindrsa components did not check whether enough randomness was returned from the user provided randomness source. Typically the user provides crypto/rand.Reader, which in the vast majority of cases will always return the right number random bytes. In the cases where it does not, or the user provides a source that does not, the blinding for blindrsa is weak and integrity of the plaintext is not ensured in tkn20.


impacts: capecId: CAPEC-620
descriptions: value: CAPEC-620 Drop Encryption Level
capecId: CAPEC-20
descriptions: value: CAPEC-20 Encryption Brute Forcing
metrics: cvssV3_1: attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:N
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-20
description: CWE-20 Improper Input Validation
type: CWE
descriptions: cweId: CWE-755
description: CWE-755 Improper Handling of Exceptional Conditions
type: CWE
source: discovery: EXTERNAL
title: Improper random reading in CIRCL
x_generator: engine: Vulnogram 0.1.0-dev