Vulnerability in Golang Go
CVE-2017-8932
A bug in the standard library ScalarMult implementation of curve P-256 for amd64 architectures in Go before 1.7.6 and 1.8.x before 1.8.2 causes incorrect results to be generated for specific input points. An adaptive attack can be mounted to progressively extract the scalar input to ScalarMult by submitting crafted points and observing failures to the derive correct output. This leads to a full key recovery attack against static ECDH, as used in popular JWT libraries.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 5.9 (Medium). Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N.
EPSS exploit prediction
EPSS: 0.022 (82.4th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 82nd percentile — 82.4% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.022 · newest: 0.022 · change: 0.000
Affected products
- Golang Go — versions 1.8, 1.8.1
- Novell SUSE Package Hub For Linux Enterprise — versions 12
- Fedoraproject Fedora — versions 25
- openSUSE Leap — versions 42.2
Weakness classification (CWE)
Public proof-of-concept exploits
References
- groups.google.com/d/msg/golang-announce/B5ww0iFt1_Q/TgUFJV14BgAJ (Vendor Advisory, mailing-list)
- github.com/golang/go/commit/9294fa2749ffee7edbbb817a0ef9fe633136fa9c (Patch, Third Party Advisory, Issue Tracking)
- access.redhat.com/errata/RHSA-2017:1859 (vendor-advisory)
- lists.opensuse.org/opensuse-updates/2017-06/msg00080.html (vendor-advisory, Patch, Third Party Advisory)
- lists.opensuse.org/opensuse-updates/2017-06/msg00079.html (vendor-advisory, Patch, Third Party Advisory)
- bugzilla.redhat.com/show_bug.cgi (Third Party Advisory, Issue Tracking)
- github.com/golang/go/issues/20040 (Third Party Advisory)
- go-review.googlesource.com/c/41070/ (Vendor Advisory)
- lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/… (vendor-advisory)
Frequently asked questions
- What is CVE-2017-8932?
- CVE-2017-8932 is a medium-severity vulnerability in Golang Go, classified under Incorrect Calculation. CVSS score: 5.9/10. Published 2017-07-06.
- How severe is CVE-2017-8932?
- Medium severity. CVSS v3 base score is 5.9 out of 10.
- Is CVE-2017-8932 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.