intel / intel-ipsec-mb

Intel(R) Multi-Buffer Crypto for IPSec
BSD 3-Clause "New" or "Revised" License
288 stars 88 forks source link

AES-CCM authentication flush may load out of scope data #107

Closed tkanteck closed 1 year ago

tkanteck commented 1 year ago

On AES-CCM authentication, NULL lanes can load out of scope data that in some scenarios may lead to segmentation fault, i.e.:

Potential out of scope data being loaded is subject of CBC-MAC computation (not copied or leaked anywhere).

Affected library versions from v0.53 to v1.2 and all architectures.

The fix is in progress and it will be part of v1.3 release.