CVE-2024-58265
The snow crate before 0.9.5 for Rust, when stateful TransportState is used, allows incrementing a nonce and thereby denying message delivery.
Summary
Unauthenticated Nonce Increment in snow
Original description
The description as published by the source.
The snow crate before 0.9.5 for Rust, when stateful TransportState is used, allows incrementing a nonce and thereby denying message delivery.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
crates.io
snow
[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"},{"fixed":"0.9.5"}]}]
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2024-58265 rust-snow Fixed in: 0.9.6-1
- Ubuntu UBUNTU-CVE-2024-58265 rust-snow
References
- advisory rustsec.org
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- web crates.io
- web github.com