CVE-2019-11840 golang.org/x/crypto/salsa20/salsa uses insufficiently random values
A flaw in the Go salsa20 implementation causes keystream repetition after 256 GiB, leading to loss of confidentiality in encryption or CSPRNG applications.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2019-11840?
CVE-2019-11840 is a medium-severity vulnerability in Debian Debian Linux, published on 9 May 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An issue was discovered in the supplementary Go cryptography library, golang.org/x/crypto, before v0.0.0-20190320223903-b7391e95e576. A flaw was found in the amd64 implementation of the golang.org/x/crypto/salsa20 and golang.org/x/crypto/salsa20/salsa packages. If more than 256 GiB of keystream is generated, or if the counter otherwise grows greater than 32 bits, the amd64 implementation will first generate incorrect output, and then cycle back to previously generated keystream. Repeated keystream bytes can lead to loss of confidentiality in encryption applications, or to predictability in CSPRNG applications.
Weakness: CWE-330
Which versions are affected by CVE-2019-11840?
3 open source packages ship an affected version, including golang.org/x/crypto. It affects 2 products.
| Package | Affected | Fixed in |
|---|---|---|
golang.org/x/crypto Go | All versions | 0.0.0-20190320223903-b7391e95e576 |
golang.org/x/crypto Go | All versions | 0.0.0-20190320223903-b7391e95e576 |
golang.org/x/crypto Go | All versions | 0.0.0-20190320223903-b7391e95e576 |
Products include Debian Debian Linux, Golang Crypto.
How do I fix CVE-2019-11840?
Upgrade golang.org/x/crypto to 0.0.0-20190320223903-b7391e95e576 or later.
Is CVE-2019-11840 being exploited?
There is no known exploitation of CVE-2019-11840 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as DEBIAN-CVE-2019-11840, DLA-1840-1, DLA-2442-1, DLA-2454-1, DLA-2527-1, GHSA-r5c5-pr8j-pfp7 and 2 more.