3.1

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-97f8-h76h-f297

GHSA-97f8-h76h-f297: Duplicate Advisory: Unauthenticated Nonce Increment in snow

Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-7g9j-g5jg-3vv3. This link is maintained to preserve external references.

Original Description

The snow crate before 0.9.5 for Rust, when stateful TransportState is used, allows incrementing a nonce and thereby denying message delivery.

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-97f8-h76h-f297

GHSA-97f8-h76h-f297:

3.1

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
snow	rust	< 0.9.5	0.9.5

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability is a logic error within the snow crate's stateful TransportState implementation. Specifically, the snow::cipherstate::CipherState::decrypt_and_increment function would increment its internal nonce counter even when a message decryption failed due to an authentication error. An attacker with the ability to inject packets could send a malformed or unauthenticated message to a listening peer. The peer's TransportState::read_message function would be called, which in turn calls CipherState::decrypt_and_increment. While the decryption would fail, the nonce would still be incremented. This desynchronizes the cryptographic state between the two peers, as the sender's nonce and the receiver's expected nonce no longer match. Consequently, all subsequent, legitimate messages from the sender would fail to decrypt, resulting in a denial of service. The patch addresses this by ensuring the decryption result is checked before the nonce is incremented, so a failed decryption no longer affects the internal state.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.