CVE-2020-25021

概要

参考情報

• packetstormsecurity.com/files/159057/Noise-Java-ChaChaPolyCipherState.encryptWithAd-Insufficient-Boundary-Checks.html · Third Party Advisory
• seclists.org/fulldisclosure/2020/Sep/14 · Third Party Advisory
• rweather/noise-java commit 18e86b6 · Patch
• rweather/noise-java#12 · Third Party Advisory

noise-java のその他の脆弱性

• CVE-2020-25023緊急 9.8An issue was discovered in Noise-Java through 2020-08-27. AESGCMOnCtrCipherState.encryptWithAd() allows out-of-bounds access.
• CVE-2020-25022緊急 9.8An issue was discovered in Noise-Java through 2020-08-27. AESGCMFallbackCipherState.encryptWithAd() allows out-of-bounds access.