CVE-2026-81019

Katalog CVE

CVSS 7.4 · High EPSS 0,38%

Kerentanan Reusing a Nonce, Key Pair in Encryption pada wolfssl wolfprovider. Skor CVSS 3.1 7.4 (High) menurut wolfssl.com.

Deskripsi (NVD)

wolfProvider before 1.2.2 generates the 8-byte explicit AES-GCM nonce once when the TLS write key is set and never increments it per record. As a result every TLS 1.2 and DTLS 1.2 AES-GCM record within a connection is encrypted under an identical key and nonce pair. Reusing a GCM key and nonce discloses the keystream (the XOR of two ciphertexts equals the XOR of their plaintexts, so one known record recovers the others) and leaks the GHASH authentication key, enabling authentication tag forgery. AES-CCM, TLS 1.3, and non-TLS use of the cipher are not affected.

Rincian

Terbit di NVD

28 Agustus 2026

Terakhir diubah

29 September 2026

Status NVD

Analyzed

CVSS 3.1

7.4 (High), sumber wolfssl.com
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-323: Reusing a Nonce, Key Pair in Encryption

EPSS (30 hari)

0,38% peluang dieksploitasi; lebih tinggi dari 30,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.wolfssl.com/docs/security-vulnerabilities/ advisory vendor