OHTTP Implementation Vulnerable to Sequence Number Overflow and Nonce Repeatation

CVE-2024-36121

Summary

The Netty Incubator Codec OHTTP implementation features a vulnerability stemming from the BoringSSLAEADContext class, which erroneously manages the sequence numbers of OHTTP responses. When two specific coding errors collide, it creates an opportunity for an attacker to induce a sequence number overflow, leading to the potential repetition of nonces used in the encryption process. As a result, this flaw can compromise the integrity of encrypted communications and enable further malicious exploits.

References