PT-2021-24270 · Sha2 · Sha2

Published 2021-09-08 · Updated 2023-08-08 · CVE-2021-45696

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: sha2 crate version 0.9.7

Description: An issue was discovered in the sha2 crate for Rust, where hashes of long messages may be incorrect when the AVX2-accelerated backend is used. This backend was introduced in version 0.9.7 and was automatically enabled for all x86/x86 64 CPUs where AVX2 support was autodetected at runtime. The backend was buggy and would miscompute results for long messages, i.e., messages spanning multiple SHA blocks.

Recommendations: For version 0.9.7, immediately upgrade to version 0.9.8 and recompute any hashes which were previously computed by version 0.9.7.

Fix

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

Related Identifiers

CVE-2021-45696

GHSA-FC7X-2CMC-8J2G

GHSA-XPWW-G9JX-HP8R

RUSTSEC-2021-0100

Affected Products

Sha2

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2021-45696 · Security Note
• https://osv.dev/vulnerability/GHSA-fc7x-2cmc-8j2g · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-xpww-g9jx-hp8r · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-45696 · Vendor Advisory
• https://osv.dev/vulnerability/RUSTSEC-2021-0100 · Vendor Advisory
• https://github.com/RustCrypto/hashes · Note
• https://github.com/RustCrypto/hashes/pull/314 · Note
• https://rustsec.org/advisories/RUSTSEC-2021-0100.html · Note
• https://crates.io/crates/sha2 · Note
• https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/sha2/RUSTSEC-2021-0100.md · Note