Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q4q5-jx42-4xp9

Опубликовано: 25 июн. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 2
CVSS3: 7.5

Описание

AES-GCM encryption/decryption with extremely large cumulative single message sizes (>64 GiB) were not properly rejected by the streaming APIs, allowing counter wrap, keystream reuse, and consequent plaintext recovery.

AES-GCM encryption/decryption with extremely large cumulative single message sizes (>64 GiB) were not properly rejected by the streaming APIs, allowing counter wrap, keystream reuse, and consequent plaintext recovery.

EPSS

Процентиль: 2%
0.00114
Низкий

2 Low

CVSS4

7.5 High

CVSS3

Дефекты

CWE-323

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 1 месяца назад

AES-GCM encryption/decryption with extremely large cumulative single message sizes (>64 GiB) were not properly rejected by the streaming APIs, allowing counter wrap, keystream reuse, and consequent plaintext recovery.

CVSS3: 7.5
nvd
около 1 месяца назад

AES-GCM encryption/decryption with extremely large cumulative single message sizes (>64 GiB) were not properly rejected by the streaming APIs, allowing counter wrap, keystream reuse, and consequent plaintext recovery.

msrc
около 1 месяца назад

AES-GCM streaming APIs do not reject >64 GiB cumulative single messages, enabling counter wrap and keystream reuse

CVSS3: 7.5
debian
около 1 месяца назад

AES-GCM encryption/decryption with extremely large cumulative single m ...

EPSS

Процентиль: 2%
0.00114
Низкий

2 Low

CVSS4

7.5 High

CVSS3

Дефекты

CWE-323