跳转到帖子

FreeBSD: VID-742279D6-BDBE-11ED-A179-2B68E9D12706 (CVE-2023-24532): go -- crypto/elliptic: incorrect P-256 ScalarMult and ScalarBaseMult results

recommended_posts

发布于
  • Members

FreeBSD: VID-742279D6-BDBE-11ED-A179-2B68E9D12706 (CVE-2023-24532): go -- crypto/elliptic: incorrect P-256 ScalarMult and ScalarBaseMult results

Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:P/A:N)
Published
02/22/2023
Created
03/13/2023
Added
03/09/2023
Modified
01/28/2025

Description

The ScalarMult and ScalarBaseMult methods of the P256 Curve may return an incorrect result if called with some specific unreduced scalars (a scalar larger than the order of the curve). This does not impact usages of crypto/ecdsa or crypto/ecdh.

Solution(s)

  • freebsd-upgrade-package-go119
  • freebsd-upgrade-package-go120

References

  • CVE-2023-24532
  • 查看数 694
  • 已创建
  • 最后回复

参与讨论

你可立刻发布并稍后注册。 如果你有帐户,立刻登录发布帖子。

游客
回帖…