Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2023-24532

Good to know:

icon

Date: March 8, 2023

The ScalarMult and ScalarBaseMult methods of the P256 Curve may return an incorrect result if called with some specific unreduced scalars (a scalar larger than the order of the curve). This does not impact usages of crypto/ecdsa or crypto/ecdh.

Language: Go

Severity Score

Related Resources (8)

https://access.redhat.com/security/cve/CVE-2023-24532
https://groups.google.com/g/golang-announce/c/3-TpUx48iQY
https://nvd.nist.gov/vuln/detail/CVE-2023-24532
https://security-tracker.debian.org/tracker/CVE-2023-24532
https://go.dev/issue/58647
https://pkg.go.dev/vuln/GO-2023-1621
https://go.dev/cl/471255
https://www.mend.io/vulnerability-database/CVE-2023-24532

Severity Score

Weakness Type (CWE)

Incorrect Calculation

CWE-682

Top Fix

icon

Upgrade Version

Upgrade to version go1.20.2

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): LOW
Availability (A): NONE

Do you need more information?

Contact Us