Description
An issue was discovered in the chacha20 crate before 0.2.3 for Rust. A ChaCha20 counter overflow makes it easier for attackers to determine plaintext.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| crates.io | chacha20 | < 0.2.3 | 0.2.3 | GHSA-j2r6-2m5c-vgh5 |
| crates.io | chacha20 | >= 0.0.0-0, < 0.2.3 | 0.2.3 | RUSTSEC-2019-0029 |