WireGuard, such as WireGuard 0.5.3 on Windows, does not fully account for the possibility that an adversary might be able to set a victim's system time to a future value, e.g., because unauthenticated NTP is used. This can lead to an outcome in which one static private key becomes permanently useless.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2023-01-29T00:00:00
Updated: 2024-08-04T05:17:42.653Z
Reserved: 2023-01-29T00:00:00
Link: CVE-2021-46873
Vulnrichment
No data.
NVD
Status : Modified
Published: 2023-01-29T23:15:08.703
Modified: 2024-11-21T06:34:49.717
Link: CVE-2021-46873
Redhat
No data.