Skip to content
OpenAdvisories

Product · Sirius Computer

Crux Agent

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.3

    Crux Agent silently fails SKA preshared key rotation when SHA-512 peering is negotiated

    Crux Agent from 1.9.0 before 2.0.3 uses the full SKA bilocation key as the WireGuard preshared key. When a peering session negotiates use of SHA-512, the key produced is 64 bytes instead of the 32 bytes WireGuard requires. The agent does not validate this siz…