{"id":"EUVD-2024-54824","enisaUuid":"feb66991-14c2-3e96-8a4e-9b7c29052b99","description":"The snow crate before 0.9.5 for Rust, when stateful TransportState is used, allows incrementing a nonce and thereby denying message delivery.","datePublished":"Jul 27, 2025, 12:00:00 AM","dateUpdated":"Jul 28, 2025, 3:05:47 PM","baseScore":3.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","references":"https://rustsec.org/advisories/RUSTSEC-2024-0011.html\nhttps://github.com/mcginty/snow/security/advisories/GHSA-7g9j-g5jg-3vv3\nhttps://crates.io/crates/snow\n","aliases":"CVE-2024-58265\nGHSA-7g9j-g5jg-3vv3\n","assigner":"mitre","epss":0.47,"enisaIdProduct":[{"id":"3f231f58-20c3-3115-ba97-257baecba5bf","product":{"name":"snow","vendor":{"name":"mcginty"}},"product_version":"0 \u003c0.9.5"}],"enisaIdVendor":[{"id":"0aeb0e26-493c-348d-9b44-d43b1b64af4c","vendor":{"name":"mcginty"}}],"enisaIdVulnerability":[{"id":"3064d0a4-c3bd-315d-b08c-4ded594a3234","vulnerability":{"id":"GHSA-7g9j-g5jg-3vv3","description":"Unauthenticated Nonce Increment in snow","datePublished":"Jan 24, 2024, 8:53:48 PM","dateUpdated":"Jul 28, 2025, 3:56:29 PM","baseScore":null,"references":"https://github.com/mcginty/snow/security/advisories/GHSA-7g9j-g5jg-3vv3\nhttps://nvd.nist.gov/vuln/detail/CVE-2024-58265\nhttps://github.com/mcginty/snow/commit/12e8ae55547ae297d5f70599e5c884ea891303eb\nhttps://github.com/mcginty/snow\nhttps://rustsec.org/advisories/RUSTSEC-2024-0011.html\n","enisa_id":"EUVD-2024-54824\n","aliases":"CVE-2024-58265\nGHSA-7g9j-g5jg-3vv3\n","epss":0.0,"dataProcessed":"May 3, 2026, 2:08:14 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"7974a749-9f6c-36a8-a9d7-e9d2945477c9","vulnerability":{"id":"CVE-2024-58265","description":"The snow crate before 0.9.5 for Rust, when stateful TransportState is used, allows incrementing a nonce and thereby denying message delivery.","datePublished":"Jul 27, 2025, 12:00:00 AM","dateUpdated":"Jul 28, 2025, 3:05:47 PM","status":"PUBLISHED","baseScore":3.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","references":"https://rustsec.org/advisories/RUSTSEC-2024-0011.html\nhttps://github.com/mcginty/snow/security/advisories/GHSA-7g9j-g5jg-3vv3\nhttps://crates.io/crates/snow\n","enisa_id":"EUVD-2024-54824\n","assigner":"mitre","epss":0.47,"dataProcessed":"Nov 4, 2026, 7:19:11 AM","vulnerabilityProduct":[{"id":"187604e1-9d1f-3f87-b797-17762e85de85","product":{"name":"snow","vendor":{"name":"mcginty"}},"product_version":"0 \u003c0.9.5"},{"id":"946cd6bf-869c-4f1a-9c7d-75c964484147","product":{"name":"snow","vendor":{"name":"mcginty"}},"product_version":"0 \u003c0.9.5"}],"vulnerabilityVendor":[{"id":"5a8ce776-caa2-3b8f-bee5-51451b5dd206","vendor":{"name":"mcginty"}}]}}],"enisaIdAdvisory":[]}