GO-2022-0435

vendorUSosv

Panic due to large inputs affecting P-256 curves in crypto/elliptic

view advisory published 2022-05-20Licence: per source

A crafted scalar input longer than 32 bytes can cause P256().ScalarMult or P256().ScalarBaseMult to panic. Indirect uses through crypto/ecdsa and crypto/tls are unaffected. amd64, arm64, ppc64le, and s390x are unaffected.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2022-28327US	high7.5	4.16% (91st)	—	2022-04-20
The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows a panic via long scalar input.

references

External citations — patches, advisories, analysis.

https://go.dev/cl/397135FIX
https://go.dev/issue/52075REPORT
https://go.googlesource.com/go/+/37065847d87df92b5eb246c88ba2085efcf0b331FIX
https://groups.google.com/g/golang-announce/c/oecdBNLOml8WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan