Exposure of Sensitive Information to an Unauthorized Actor Affecting io.netty.incubator:netty-incubator-codec-ohttp-hpke-classes-boringssl package, versions [0.0.3.Final,0.0.11.Final)
Threat Intelligence
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-JAVA-IONETTYINCUBATOR-7213248
- published 5 Jun 2024
- disclosed 4 Jun 2024
- credit SalusaSecondus
Introduced: 4 Jun 2024
CVE-2024-36121 Open this link in a new tabHow to fix?
Upgrade io.netty.incubator:netty-incubator-codec-ohttp-hpke-classes-boringssl to version 0.0.11.Final or higher.
Overview
Affected versions of this package are vulnerable to Exposure of Sensitive Information to an Unauthorized Actor due to the BoringSSLAEADContext sequence number overflow. An attacker can manipulate the nonce repetition by causing the sequence number to overflow.
If the BoringSSLAEADContext is used to encrypt more than 2^32 messages, then the AES-GCM nonce will repeat.
Repeating a nonce with AES-GCM results in both confidentiality and integrity compromise of data encrypted with the associated key.