CVE-2024-36121

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-36121
netty-incubator-codec-ohttp is the OHTTP implementation for netty. BoringSSLAEADContext keeps track of how many OHTTP responses have been sent and uses this sequence number to calculate the appropriate nonce to use with the encryption algorithm. Unfortunately, two separate errors combine which would allow an attacker to cause the sequence number to overflow and thus the nonce to repeat.

9.1 /10

CVSS v3.0 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://github.com/netty/netty-incubator-codec-ohttp/security/advisories/GHSA-g762-h86w-8749 Exploit Vendor Advisory
https://github.com/netty/netty-incubator-codec-ohttp/blob/1ddadb6473cd3be5491d114431ed4c1a9f316001/codec-ohttp-hpke-classes-boringssl/src/main/java/io/netty/incubator/codec/hpke/boringssl/BoringSSLAEADContext.java#L112-L114 Product
Configurations

Configuration 1 (hide)

cpe:2.3:a:netty:netty-incubator-codec-ohttp:*:*:*:*:*:*:*:*
History

11 Jun 2024, 16:52

Type Values Removed Values Added
References () https://github.com/netty/netty-incubator-codec-ohttp/blob/1ddadb6473cd3be5491d114431ed4c1a9f316001/codec-ohttp-hpke-classes-boringssl/src/main/java/io/netty/incubator/codec/hpke/boringssl/BoringSSLAEADContext.java#L112-L114 - () https://github.com/netty/netty-incubator-codec-ohttp/blob/1ddadb6473cd3be5491d114431ed4c1a9f316001/codec-ohttp-hpke-classes-boringssl/src/main/java/io/netty/incubator/codec/hpke/boringssl/BoringSSLAEADContext.java#L112-L114 - Product
References () https://github.com/netty/netty-incubator-codec-ohttp/security/advisories/GHSA-g762-h86w-8749 - () https://github.com/netty/netty-incubator-codec-ohttp/security/advisories/GHSA-g762-h86w-8749 - Exploit, Vendor Advisory
First Time Netty
Netty netty-incubator-codec-ohttp
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 9.1
CWE CWE-190
CPE cpe:2.3:a:netty:netty-incubator-codec-ohttp:*:*:*:*:*:*:*:*

04 Jun 2024, 22:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-06-04 22:15

Updated : 2024-06-11 16:52

NVD link : CVE-2024-36121

Mitre link : CVE-2024-36121

JSON object : View

Products Affected

netty

  • netty-incubator-codec-ohttp
CWE
CWE-190

Integer Overflow or Wraparound