{"id":"EUVD-2023-2411","revision":"c3173125662f4af496a20993971a7154","records":[{"revision":"c3173125662f4af496a20993971a7154","observedAt":"2026-11-04T21:57:20.442+00:00","statement":{"source":"euvd","id":"EUVD-2023-2411","aliases":["CVE-2023-42811","GHSA-423w-p2w9-r7vq"],"title":"aes-gcm is a pure Rust implementation of the AES-GCM. Starting in version 0.10.0 and prior to version 0.10.3, in the AES GCM implementation of decrypt_in_place_detached, the decrypted ciphertext (i.e. the correct plaintext) is exposed even …","description":"aes-gcm is a pure Rust implementation of the AES-GCM. Starting in version 0.10.0 and prior to version 0.10.3, in the AES GCM implementation of decrypt_in_place_detached, the decrypted ciphertext (i.e. the correct plaintext) is exposed even if tag verification fails. If a program using the `aes-gcm` crate's `decrypt_in_place*` APIs accesses the buffer after decryption failure, it will contain a decryption of an unauthenticated input. Depending on the specific nature of the program this may enable Chosen Ciphertext Attacks (CCAs) which can cause a catastrophic breakage of the cipher including full plaintext recovery. Version 0.10.3 contains a fix for this issue.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:N","score":4.7,"severity":null}],"references":["https://github.com/RustCrypto/AEADs/security/advisories/GHSA-423w-p2w9-r7vq","https://docs.rs/aes-gcm/latest/src/aes_gcm/lib.rs.html#309","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RYQCICN6BVC6I75O3F6W4VK4J3MOYDJU/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U67ZSMNX5V3WTBYPUYF45PSFG4SF5SGF/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ROBB6TBDAGEQ2WIINR34F3DPSN3FND6K/"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-2411","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Sep 22, 2023, 3:19:15 PM","dateUpdated":"Jun 18, 2025, 2:22:56 PM"},"relatedAdvisories":[{"id":"SUSE-SU-2023:4060-1","title":"Security update for rage-encryption","vulnerabilityIds":["CVE-2023-42811"]},{"id":"openSUSE-SU-2024:13315-1","title":"shadowsocks-rust-1.16.2-1.1 on GA media","vulnerabilityIds":["CVE-2023-42811"]}],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2023-2411","identifiers":["EUVD-2023-2411","CVE-2023-42811","GHSA-423w-p2w9-r7vq"]},"retained":false,"historicalAffected":[]}],"coverage":[]}