BIT-golang-2023-24532

vendorUSosv

Incorrect calculation on P256 curves in crypto/internal/nistec

view advisory published 2024-03-06Licence: per source

The ScalarMult and ScalarBaseMult methods of the P256 Curve may return an incorrect result if called with some specific unreduced scalars (a scalar larger than the order of the curve). This does not impact usages of crypto/ecdsa or crypto/ecdh.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2023-24532US	medium5.3	0.82% (57th)	—	2023-03-08
The ScalarMult and ScalarBaseMult methods of the P256 Curve may return an incorrect result if called with some specific unreduced scalars (a scalar larger than the order of the cur…

references

External citations — patches, advisories, analysis.

https://go.dev/cl/471255FIX
https://go.dev/issue/58647FIX
https://groups.google.com/g/golang-announce/c/3-TpUx48iQYDISCUSSION
https://nvd.nist.gov/vuln/detail/CVE-2023-24532WEB
https://pkg.go.dev/vuln/GO-2023-1621ADVISORY
https://security.netapp.com/advisory/ntap-20230331-0011/WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan