GO-2021-0235
Incorrect operations on the P-224 curve in crypto/elliptic
En bref
- Publiée
- Mise à jour
- CVE
- CVE-2021-3114
- Alias
- BIT-golang-2021-3114
Description
The P224() Curve implementation can in rare circumstances generate incorrect outputs, including returning invalid points from ScalarMult.
Paquets affectés
| Paquet | Versions |
|---|---|
| Go · stdlib | introduced 0, fixed 1.14.14, introduced 1.15.0-0, fixed 1.15.7 |
Références
- https://go.dev/cl/284779 FIX
- https://go.googlesource.com/go/+/d95ca9138026cbe40e0857d76a81a16d03230871 FIX
- https://go.dev/issue/43786 REPORT
- https://groups.google.com/g/golang-announce/c/mperVMGa98w WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — Go Vulnerability Database |