Skip to content
OpenAdvisories
High · 7.5 CVE-2021-4239 EUVD-2022-7529GHSA-6cr6-fmvc-vw2pGHSA-g9mp-8g3h-3c5cGO-2022-0425

Weak encryption and denial of service in github.com/flynn/noise

Published Dec 27, 2022 · Updated Apr 14, 2025 · Assigned by Go

Description

The Noise protocol implementation suffers from weakened cryptographic security after encrypting 2^64 messages, and a potential denial of service attack. After 2^64 (~18.4 quintillion) messages are encrypted with the Encrypt function, the nonce counter will wrap around, causing multiple messages to be encrypted with the same key and nonce. In a separate issue, the Decrypt function increments the nonce state even when it fails to decrypt a message. If an attacker can provide an invalid input to the Decrypt function, this will cause the nonce state to desynchronize between the peers, resulting in a failure to encrypt all subsequent messages.

Affected products

VendorProductAffectedFixed
github.com/flynn/noise github.com/flynn/noise < 1.0.0 1.0.0

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu 26.10 golang-github-flynn-noise No fix yet —
Ubuntu 26.04 LTS golang-github-flynn-noise No fix yet —
Ubuntu 25.10 golang-github-flynn-noise No fix yet —
Ubuntu 24.04 LTS golang-github-flynn-noise No fix yet —
Ubuntu 22.04 LTS golang-github-flynn-noise No fix yet —

Affected packages

EcosystemPackageAffectedFixedRecord
Go github.com/flynn/noise < 1.0.0 1.0.0 GHSA-6cr6-fmvc-vw2p

References