Skip to content

Ncrack Parser is using a depracated encryption padding mechanism removed in the newest node security patch #2310

@J12934

Description

@J12934

🐞 Bug report

Describe the bug

https://nodejs.org/en/blog/vulnerability/february-2024-security-releases#nodejs-is-vulnerable-to-the-marvin-attack-timing-variant-of-the-bleichenbacher-attack-against-pkcs1-v15-padding-cve-2023-46809---medium

Expected behavior

Encryption should still work on newer versions of node

System

Screenshots / Logs

TypeError: RSA_PKCS1_PADDING is no longer supported for private decryption, this can be reverted with --security-revert=CVE-2023-46809

Additional context

Ideally this encryption should be switched to something more modern like age.
Will open up another ticket for that.

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

Status

Done

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions