Vulnerability · Published Mar 8, 2023 · Assigned by Go
CVE-2023-24532Incorrect calculation on P256 curves in crypto/internal/nistec
Medium 5.3
In plain English
A medium-severity security flaw in crypto/internal/nistec from Go standard library. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 57% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS NVD)5.3Medium
Exploit odds (30 days)0.8%top 42.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
The ScalarMult and ScalarBaseMult methods of the P256 Curve may return an incorrect result if called with some specific unreduced scalars (a scalar larger than the order of the curve). This does not impact usages of crypto/ecdsa or crypto/ecdh.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine:v3.20 | go | 1.20.2-r0 | ALPINE-CVE-2023-24532 |
| Alpine:v3.21 | go | 1.20.2-r0 | ALPINE-CVE-2023-24532 |
| Alpine:v3.22 | go | 1.20.2-r0 | ALPINE-CVE-2023-24532 |
| Alpine:v3.23 | go | 1.20.2-r0 | ALPINE-CVE-2023-24532 |
| Alpine:v3.24 | go | 1.20.2-r0 | ALPINE-CVE-2023-24532 |
| Debian:12 | golang-1.19 | 1.19.8-2 | DEBIAN-CVE-2023-24532 |
| Go | stdlib | 1.19.7, 1.20.2 | GO-2023-1621 |
| Ubuntu:22.04:LTS | golang-1.17 | no fix listed | UBUNTU-CVE-2023-24532 |
| Ubuntu:22.04:LTS | golang-1.18 | no fix listed | UBUNTU-CVE-2023-24532 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Go standard library | crypto/internal/nistec | 0 – before 1.19.71.20.0-0 – before 1.20.2 |