REDHAT-BUG-2371624: Low severity Cloudflare circl (FourQ implementation) vulnerability
Impact The CIRCL implementation of FourQ fails to validate user-supplied low-order points during Diffie-Hellman key exchange, potentially allowing attackers to force the identity point and compromise session security.
Moreover, there is an incorrect point validation in ScalarMult can lead to incorrect results in the isEqual function and if a point is on the curve.
Patches Version 1.6.1 (https://github.com/cloudflare/circl/tree/v1.6.1) mitigates the identified issues.
We acknowledge Alon Livne (Botanica Software Labs) for the reported findings.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
CIRCL (FourQ / Diffie-Hellman)to a version that resolves this vulnerability.Fixed in 1.6.1
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2371624?
The severity of REDHAT-BUG-2371624 is critical due to the potential compromise of session security during Diffie-Hellman key exchanges.
How do I fix REDHAT-BUG-2371624?
To fix REDHAT-BUG-2371624, upgrade to a version of Cloudflare CIRCL greater than 1.6.1 that includes the necessary validations against low-order points.
What are the consequences of not addressing REDHAT-BUG-2371624?
Not addressing REDHAT-BUG-2371624 may lead to unauthorized access and eavesdropping on secure communications due to compromised session security.
Which versions of Cloudflare CIRCL are affected by REDHAT-BUG-2371624?
Cloudflare CIRCL versions up to 1.6.1 are affected by REDHAT-BUG-2371624.
What specific vulnerability is described in REDHAT-BUG-2371624?
REDHAT-BUG-2371624 describes a failure to validate user-supplied low-order points during the Diffie-Hellman key exchange in Cloudflare CIRCL.