发布于3月6日3月6日 Members Debian: CVE-2023-24532: golang-1.19 -- security update Severity 5 CVSS (AV:N/AC:L/Au:N/C:N/I:P/A:N) Published 03/08/2023 Created 07/31/2024 Added 07/30/2024 Modified 01/28/2025 Description The ScalarMult and ScalarBaseMult methods of the P256 Curve may return an incorrect result if called with some specific unreduced scalars (a scalar larger than the order of the curve). This does not impact usages of crypto/ecdsa or crypto/ecdh. Solution(s) debian-upgrade-golang-1-19 References https://attackerkb.com/topics/cve-2023-24532 CVE - 2023-24532
