PT-2022-11591 · Noise · Noise

Published 2022-02-15 · Updated 2023-01-06 · CVE-2021-4239

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions github.com/flynn/noise versions prior to v1.0.0

Description The Noise protocol implementation has weakened cryptographic security after encrypting 2^64 messages and is vulnerable to a potential denial of service attack. After 2^64 messages are encrypted with the Encrypt function, the nonce counter will wrap around, causing multiple messages to be encrypted with the same key and nonce. The Decrypt function increments the nonce state even when it fails to decrypt a message, allowing an attacker to desynchronize the nonce state between peers by providing an invalid input, resulting in a failure to encrypt all subsequent messages.

Recommendations For versions prior to v1.0.0, update to v1.0.0 or later to resolve the issue. As a temporary workaround, consider implementing a handshake again when the ErrMaxNonce error is encountered from the CipherState Encrypt and Decrypt methods to start with a fresh CipherState. Restrict access to the Decrypt function to minimize the risk of exploitation until the issue is resolved.

Fix

Missing Encryption of Sensitive Data

Weakness Enumeration

CWE-311

Related Identifiers

CVE-2021-4239

GHSA-6CR6-FMVC-VW2P

GHSA-G9MP-8G3H-3C5C

GO-2022-0425

Affected Products

Noise

References · 15

• https://github.com/flynn/noise/pull/44 · Patch
• https://osv.dev/vulnerability/GO-2022-0425 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-g9mp-8g3h-3c5c · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-6cr6-fmvc-vw2p · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-4239 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-4239 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-4239 · Security Note
• https://pkg.go.dev/vuln/GO-2022-0425 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-4239 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-4239 · Vendor Advisory
• https://github.com/flynn/noise · Note
• https://github.com/flynn/noise/commit/2499bf1bad239a8316c32932a993642350b3afdb · Note
• https://github.com/flynn/noise/security/advisories/GHSA-g9mp-8g3h-3c5c · Note
• https://t.me/cibsecurity/55454 · Telegram Post
• https://t.me/cvenotify/40825 · Telegram Post