{"id":"EUVD-2023-2411","enisaUuid":"e234120e-71e4-3b54-a788-efbed80bc494","description":"aes-gcm is a pure Rust implementation of the AES-GCM. Starting in version 0.10.0 and prior to version 0.10.3, in the AES GCM implementation of decrypt_in_place_detached, the decrypted ciphertext (i.e. the correct plaintext) is exposed even if tag verification fails. If a program using the `aes-gcm` crate\u0027s `decrypt_in_place*` APIs accesses the buffer after decryption failure, it will contain a decryption of an unauthenticated input. Depending on the specific nature of the program this may enable Chosen Ciphertext Attacks (CCAs) which can cause a catastrophic breakage of the cipher including full plaintext recovery. Version 0.10.3 contains a fix for this issue.","datePublished":"Sep 22, 2023, 3:19:15 PM","dateUpdated":"Jun 18, 2025, 2:22:56 PM","baseScore":4.7,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:N","references":"https://github.com/RustCrypto/AEADs/security/advisories/GHSA-423w-p2w9-r7vq\nhttps://docs.rs/aes-gcm/latest/src/aes_gcm/lib.rs.html#309\nhttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RYQCICN6BVC6I75O3F6W4VK4J3MOYDJU/\nhttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U67ZSMNX5V3WTBYPUYF45PSFG4SF5SGF/\nhttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ROBB6TBDAGEQ2WIINR34F3DPSN3FND6K/\n","aliases":"CVE-2023-42811\nGHSA-423w-p2w9-r7vq\n","assigner":"GitHub_M","epss":0.23,"enisaIdProduct":[{"id":"83930152-5a31-36a4-985a-13d972711786","product":{"name":"AEADs","vendor":{"name":"RustCrypto"}},"product_version":"0.10.0, \u003c 0.10.3"}],"enisaIdVendor":[{"id":"1295b3f7-86f5-337f-9fae-ee0efebcc124","vendor":{"name":"RustCrypto"}}],"enisaIdVulnerability":[{"id":"465dca7c-1937-3caa-996e-acb6f0fb3510","vulnerability":{"id":"CVE-2023-42811","description":"aes-gcm is a pure Rust implementation of the AES-GCM. Starting in version 0.10.0 and prior to version 0.10.3, in the AES GCM implementation of decrypt_in_place_detached, the decrypted ciphertext (i.e. the correct plaintext) is exposed even if tag verification fails. If a program using the `aes-gcm` crate\u0027s `decrypt_in_place*` APIs accesses the buffer after decryption failure, it will contain a decryption of an unauthenticated input. Depending on the specific nature of the program this may enable Chosen Ciphertext Attacks (CCAs) which can cause a catastrophic breakage of the cipher including full plaintext recovery. Version 0.10.3 contains a fix for this issue.","datePublished":"Sep 22, 2023, 3:19:15 PM","dateUpdated":"Jun 18, 2025, 2:22:56 PM","status":"PUBLISHED","baseScore":4.7,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:N","references":"https://github.com/RustCrypto/AEADs/security/advisories/GHSA-423w-p2w9-r7vq\nhttps://docs.rs/aes-gcm/latest/src/aes_gcm/lib.rs.html#309\nhttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RYQCICN6BVC6I75O3F6W4VK4J3MOYDJU/\nhttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U67ZSMNX5V3WTBYPUYF45PSFG4SF5SGF/\nhttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ROBB6TBDAGEQ2WIINR34F3DPSN3FND6K/\n","enisa_id":"EUVD-2023-2411\n","assigner":"GitHub_M","epss":0.23,"dataProcessed":"Nov 6, 2026, 7:16:44 AM","vulnerabilityProduct":[{"id":"5702f672-1a64-3534-852f-1258c3b32df3","product":{"name":"AEADs","vendor":{"name":"RustCrypto"}},"product_version":"0.10.0, \u003c 0.10.3"},{"id":"e8f99906-f3a7-4129-b9d1-d4e4a8e4bbc9","product":{"name":"AEADs","vendor":{"name":"RustCrypto"}},"product_version":"0.10.0, \u003c 0.10.3"}],"vulnerabilityVendor":[{"id":"4fccd469-072b-37fa-83f2-7d23ea22e9d5","vendor":{"name":"RustCrypto"}}]}},{"id":"f4543cfb-e8bd-3221-851e-d3d80ff82963","vulnerability":{"id":"GHSA-423w-p2w9-r7vq","description":"AEADs/aes-gcm: Plaintext exposed in decrypt_in_place_detached even on tag verification failure","datePublished":"Sep 22, 2023, 4:11:47 PM","dateUpdated":"Dec 31, 2025, 10:00:24 PM","baseScore":0.0,"references":"https://github.com/RustCrypto/AEADs/security/advisories/GHSA-423w-p2w9-r7vq\nhttps://nvd.nist.gov/vuln/detail/CVE-2023-42811\nhttps://docs.rs/aes-gcm/latest/src/aes_gcm/lib.rs.html#309\nhttps://github.com/RustCrypto/AEADs\nhttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ROBB6TBDAGEQ2WIINR34F3DPSN3FND6K\nhttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RYQCICN6BVC6I75O3F6W4VK4J3MOYDJU\nhttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U67ZSMNX5V3WTBYPUYF45PSFG4SF5SGF\nhttps://rustsec.org/advisories/RUSTSEC-2023-0096.html\n","enisa_id":"EUVD-2023-2411\n","aliases":"GHSA-423w-p2w9-r7vq\nCVE-2023-42811\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 1:52:58 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[{"id":"2adcb562-8995-30bc-9b81-5ab6fb0959b0","advisory":{"id":"SUSE-SU-2023:4060-1","description":"Security update for rage-encryption","summary":"Security update for rage-encryption","datePublished":"Oct 12, 2023, 8:05:57 AM","dateUpdated":"Sep 20, 2026, 3:26:05 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/suse-su-2023_4060-1.json\nhttps://www.suse.com/support/update/announcement/2023/suse-su-20234060-1/\nhttps://lists.suse.com/pipermail/sle-security-updates/2023-October/016645.html\nhttps://bugzilla.suse.com/1215657\nhttps://www.suse.com/security/cve/CVE-2023-42811/\n","aliases":"CVE-2023-42811\n","source":{"id":22,"name":"csaf_suse"},"advisoryProduct":[{"id":"14905b2c-066f-3295-8a89-7b51923ac682","product":{"name":"SUSE Linux Enterprise High Performance Computing 15 SP5","vendor":{"name":"SUSE"}}},{"id":"16567cfc-8530-3736-994b-fc656028adda","product":{"name":"rage-encryption-0:0.9.2+0-150500.3.3.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"29003f7a-2339-38f0-b0de-cc477234cb6f","product":{"name":"rage-encryption-bash-completion-0.9.2+0-150500.3.3.1.noarch","vendor":{"name":"SUSE"}}},{"id":"44f670dd-d257-3966-ae9a-bfb992d9c48b","product":{"name":"rage-encryption-0.9.2+0-150500.3.3.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"49aa4bb5-6b57-3355-9214-d9756216a3c7","product":{"name":"rage-encryption-zsh-completion-0.9.2+0-150500.3.3.1.noarch","vendor":{"name":"SUSE"}}},{"id":"6f517a52-f09b-3084-a6e2-94014eb55cc5","product":{"name":"openSUSE Leap 15.5 ","vendor":{"name":"SUSE"}}},{"id":"74cba038-feea-3f15-8748-6dc90789a561","product":{"name":"rage-encryption-0:0.9.2+0-150500.3.3.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"7db3cce8-87f3-39e3-b971-a9a82491face","product":{"name":"rage-encryption-fish-completion-0:0.9.2+0-150500.3.3.1.noarch","vendor":{"name":"SUSE"}}},{"id":"91a57511-2636-3a36-9785-63aedefbfcb2","product":{"name":"rage-encryption-bash-completion-0:0.9.2+0-150500.3.3.1.noarch","vendor":{"name":"SUSE"}}},{"id":"9418f0e2-5d5d-3d45-9005-b0f98c8daf20","product":{"name":"SUSE Linux Enterprise Server for SAP Applications 15 SP5","vendor":{"name":"SUSE"}}},{"id":"9450b1e4-bc71-3ce6-be7d-71793bb94040","product":{"name":"rage-encryption-0.9.2+0-150500.3.3.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"bee8e617-06b2-3ec1-9c4b-772cbc420976","product":{"name":"SUSE Linux Enterprise Module for Basesystem 15 SP5","vendor":{"name":"SUSE"}}},{"id":"befc11bd-0ad8-3c37-b6fd-577b3046a059","product":{"name":"SUSE Linux Enterprise Desktop 15 SP5","vendor":{"name":"SUSE"}}},{"id":"ca0c18a5-05e7-380e-95cf-575b73c25395","product":{"name":"SUSE Linux Enterprise Server 15 SP5","vendor":{"name":"SUSE"}}},{"id":"cca375e4-7389-363b-8d59-71e95b093b84","product":{"name":"rage-encryption-fish-completion-0.9.2+0-150500.3.3.1.noarch","vendor":{"name":"SUSE"}}},{"id":"d1503bda-e21a-3ac5-acee-b566e09d0162","product":{"name":"rage-encryption-zsh-completion-0:0.9.2+0-150500.3.3.1.noarch","vendor":{"name":"SUSE"}}}]}},{"id":"789f9675-72a9-34f2-8e60-e6066df55e45","advisory":{"id":"openSUSE-SU-2024:13315-1","description":"shadowsocks-rust-1.16.2-1.1 on GA media","summary":"shadowsocks-rust-1.16.2-1.1 on GA media","datePublished":"Jun 15, 2024, 12:00:00 AM","dateUpdated":"Sep 20, 2026, 8:58:08 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_13315-1.json\nhttps://www.suse.com/security/cve/CVE-2023-42811/\n","aliases":"CVE-2023-42811\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"88d6db04-54b5-3572-b767-36a94a393e56","product":{"name":"shadowsocks-rust-1.16.2-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"9e689f87-991e-3f22-a667-b293946603d2","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"a25fda8e-ba95-3bc2-a5c0-286cdcd39c15","product":{"name":"shadowsocks-rust-1.16.2-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"a77110da-03be-37d4-a123-8496363c7f74","product":{"name":"shadowsocks-rust-0:1.16.2-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"b5f2c46c-9daf-38a0-862b-40df042cf379","product":{"name":"shadowsocks-rust-0:1.16.2-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"b77347fd-0e97-31ed-ac64-e63d954341ed","product":{"name":"shadowsocks-rust-0:1.16.2-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"d6e3ed64-62bb-32c8-8400-1a2d2b308248","product":{"name":"shadowsocks-rust-1.16.2-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"d972b8de-9311-3ec6-93b2-f38966ff8f94","product":{"name":"shadowsocks-rust-0:1.16.2-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"df92c974-3d95-32a6-9572-d5fd2253a995","product":{"name":"shadowsocks-rust-1.16.2-1.1.x86_64","vendor":{"name":"SUSE"}}}]}}]}