CVE-2017-8932
Summary
| CVE | CVE-2017-8932 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2017-07-06 16:29:00 UTC |
| Updated | 2025-04-20 01:37:25 UTC |
| Description | A bug in the standard library ScalarMult implementation of curve P-256 for amd64 architectures in Go before 1.7.6 and 1.8.x before 1.8.2 causes incorrect results to be generated for specific input points. An adaptive attack can be mounted to progressively extract the scalar input to ScalarMult by submitting crafted points and observing failures to the derive correct output. This leads to a full key recovery attack against static ECDH, as used in popular JWT libraries. |
Risk And Classification
Primary CVSS: v3.0 5.9 MEDIUM from [email protected]
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Problem Types: CWE-682 | n/a
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.0 | [email protected] | Primary | 5.9 | MEDIUM | CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N |
| 2.0 | [email protected] | Primary | 4.3 | AV:N/AC:M/Au:N/C:P/I:N/A:N |
CVSS v3.0 Breakdown
Attack Vector
NetworkAttack Complexity
HighPrivileges Required
NoneUser Interaction
NoneScope
UnchangedConfidentiality
HighIntegrity
NoneAvailability
NoneCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
MediumAuthentication
NoneConfidentiality
PartialIntegrity
NoneAvailability
NoneAV:N/AC:M/Au:N/C:P/I:N/A:N
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Fedoraproject | Fedora | 25 | All | All | All |
| Application | Golang | Go | 1.8 | All | All | All |
| Application | Golang | Go | 1.8.1 | All | All | All |
| Application | Golang | Go | All | All | All | All |
| Application | Novell | Suse Package Hub For Suse Linux Enterprise | 12 | All | All | All |
| Operating System | Opensuse | Leap | 42.2 | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| 1455191 – CVE-2017-8932 golang: Elliptic curvers carry propagation issue in x86-64 P-256 [fedora-all] | af854a3a-2127-422b-91ae-364da2661108 | bugzilla.redhat.com | Issue Tracking, Third Party Advisory |
| [SECURITY] Fedora 25 Update: golang-1.7.6-1.fc25 - package-announce - Fedora Mailing-Lists | af854a3a-2127-422b-91ae-364da2661108 | lists.fedoraproject.org | |
| Red Hat Customer Portal | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | |
| crypto/elliptic: fix carry bug in x86-64 P-256 implementation. · golang/go@9294fa2 · GitHub | af854a3a-2127-422b-91ae-364da2661108 | github.com | Issue Tracking, Patch, Third Party Advisory |
| openSUSE-SU-2017:1650-1: moderate: Security update for go | af854a3a-2127-422b-91ae-364da2661108 | lists.opensuse.org | Patch, Third Party Advisory |
| Google Groups | af854a3a-2127-422b-91ae-364da2661108 | groups.google.com | Vendor Advisory |
| crypto/elliptic: carry bug in x86-64 P-256 · Issue #20040 · golang/go · GitHub | af854a3a-2127-422b-91ae-364da2661108 | github.com | Third Party Advisory |
| go-review.googlesource.com/c/41070 | af854a3a-2127-422b-91ae-364da2661108 | go-review.googlesource.com | Vendor Advisory |
| openSUSE-SU-2017:1649-1: moderate: Security update for go | af854a3a-2127-422b-91ae-364da2661108 | lists.opensuse.org | Patch, Third Party Advisory |
| [SECURITY] Fedora 25 Update: golang-1.7.6-1.fc25 - package-announce - Fedora Mailing-Lists | MITRE | lists.fedoraproject.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.