PT-2021-18220 · Unknown · Jose-Node-Esm-Runtime

Morgan Brown · Published 2021-04-16 · Updated 2023-03-21 · CVE-2021-29445

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: jose-node-esm-runtime versions prior to 3.11.4

Description: The AES CBC HMAC SHA2 Algorithm decryption in the jose-node-esm-runtime package has a timing difference when a padding error occurs, creating a padding oracle. This allows an adversary to potentially decrypt data without knowing the decryption key by making on average 128*b calls to the padding oracle, where b is the number of bytes in the ciphertext block. The issue arises because both HMAC tag verification and CBC decryption are executed, and a possibly observable difference in timing occurs when a padding error happens.

Recommendations: For versions prior to 3.11.4, upgrade to version 3.11.4 or later to ensure the HMAC tag is verified before performing CBC decryption, preventing the padding oracle issue.

Fix

Side Channel Attack

Weakness Enumeration

CWE-208

CWE-696

CWE-203

Related Identifiers

CVE-2021-29445

GHSA-4V4G-726H-XVFV

Affected Products

Jose-Node-Esm-Runtime

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2021-29445 · Security Note
• https://osv.dev/vulnerability/CVE-2021-29445 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-4v4g-726h-xvfv · Vendor Advisory
• https://github.com/panva/jose · Note
• https://github.com/panva/jose/security/advisories/GHSA-4v4g-726h-xvfv · Note
• https://npmjs.com/package/jose-node-esm-runtime · Note