CVE-2020-25023

Mô tả

Tham khảo

• packetstormsecurity.com/files/159056/Noise-Java-AESGCMOnCtrCipherState.encryptWithAd-Insufficient-Boundary-Checks.html · Third Party Advisory
• seclists.org/fulldisclosure/2020/Sep/13 · Third Party Advisory
• rweather/noise-java commit 18e86b6 · Patch
• rweather/noise-java#12 · Third Party Advisory

Lỗ hổng khác của noise-java

• CVE-2020-25022NGHIÊM TRỌNG 9.8An issue was discovered in Noise-Java through 2020-08-27. AESGCMFallbackCipherState.encryptWithAd() allows out-of-bounds access.
• CVE-2020-25021NGHIÊM TRỌNG 9.8An issue was discovered in Noise-Java through 2020-08-27. ChaChaPolyCipherState.encryptWithAd() allows out-of-bounds access.