← All advisories

Low severity3.1NVD Advisory· Published Jul 27, 2025· Updated Jun 17, 2026

CVE-2024-58265

CVE-2024-58265

Description

The snow crate before 0.9.5 for Rust, when stateful TransportState is used, allows incrementing a nonce and thereby denying message delivery.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
snowcrates.io	< 0.9.5	0.9.5

Affected products

3

Mcginty/Snow2 versions
cpe:2.3:a:mcginty:snow:*:*:*:*:*:rust:*:*+ 1 more
- cpe:2.3:a:mcginty:snow:*:*:*:*:*:rust:*:*range: <0.9.5
- (no CPE)range: 0
ghsa-coords
pkg:cargo/snow
Range: < 0.9.5

Patches

Vulnerability mechanics

References

6

github.com/advisories/GHSA-7g9j-g5jg-3vv3ghsaADVISORY
github.com/mcginty/snow/security/advisories/GHSA-7g9j-g5jg-3vv3nvdVendor AdvisoryWEB
nvd.nist.gov/vuln/detail/CVE-2024-58265ghsaADVISORY
rustsec.org/advisories/RUSTSEC-2024-0011.htmlnvdThird Party AdvisoryWEB
crates.io/crates/snownvdProduct
github.com/mcginty/snow/commit/12e8ae55547ae297d5f70599e5c884ea891303ebghsaWEB

News mentions

0

No linked articles in our index yet.