Description (CNA)
The snow crate before 0.9.5 for Rust, when stateful TransportState is used, allows incrementing a nonce and thereby denying message delivery.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| mcginty / snow | affected 0 before 0.9.5 |
CWE
CWE-642
References
- https://rustsec.org/advisories/RUSTSEC-2024-0011.html
- https://github.com/mcginty/snow/security/advisories/GHSA-7g9j-g5jg-3vv3
- https://crates.io/crates/snow
ADP enrichment
No English description supplied.
No references supplied.