High severityNVD Advisory· Published Dec 31, 2020· Updated Aug 5, 2024
CVE-2019-25005
CVE-2019-25005
Description
An issue was discovered in the chacha20 crate before 0.2.3 for Rust. A ChaCha20 counter overflow makes it easier for attackers to determine plaintext.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
chacha20crates.io | < 0.2.3 | 0.2.3 |
Affected products
2- rust/chacha20description
Patches
Vulnerability mechanics
References
5- github.com/advisories/GHSA-j2r6-2m5c-vgh5ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2019-25005ghsaADVISORY
- github.com/RustCrypto/stream-ciphers/pull/64ghsaWEB
- github.com/RustCrypto/stream-ciphers/tree/master/chacha20ghsaPACKAGE
- rustsec.org/advisories/RUSTSEC-2019-0029.htmlghsax_refsource_MISCWEB
News mentions
0No linked articles in our index yet.