Vulnerability in Golang Go
CVE-2017-8932
A bug in the standard library ScalarMult implementation of curve P-256 for amd64 architectures in Go before 1.7.6 and 1.8.x before 1.8.2 causes incorrect results to be generated for specific input points. An adaptive attack can be mounted to progressively extract the scalar input to ScalarMult by submitting crafted points and observing failures to the derive correct output. This leads to a full key recovery attack against static ECDH, as used in popular JWT libraries.
EPSS: 0.022 (81.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.9 (Medium). Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Golang Go — versions 1.8, 1.8.1
- Novell Suse_package_hub_for_suse_linux_enterprise — versions 12
- Fedoraproject Fedora — versions 25
- Opensuse Leap — versions 42.2
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_MLIST)
- cve@mitre.org (x_refsource_CONFIRM, Patch, Third Party Advisory, Issue Tracking)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory)
- cve@mitre.org (vendor-advisory, Patch, Third Party Advisory, x_refsource_SUSE)
- cve@mitre.org (vendor-advisory, Patch, Third Party Advisory, x_refsource_SUSE)
- cve@mitre.org (Third Party Advisory, x_refsource_MISC, Issue Tracking)
- cve@mitre.org (x_refsource_CONFIRM, Third Party Advisory)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
- cve@mitre.org (vendor-advisory, x_refsource_FEDORA)
Frequently asked questions
- What is CVE-2017-8932?
- CVE-2017-8932 is a medium-severity vulnerability in Golang Go, classified under Incorrect Calculation. CVSS score: 5.9/10. Published 2017-07-06.
- How severe is CVE-2017-8932?
- Medium severity. CVSS v3 base score is 5.9 out of 10.
- Is CVE-2017-8932 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.