Golang Go CVE-2017-8932 Security Bypass Vulnerability

Bugtraq ID:	99595
Class:	Design Error
CVE:	CVE-2017-8932
Remote:	Yes
Local:	No
Published:	Jul 06 2017 12:00AM
Updated:	Jul 06 2017 12:00AM
Credit:	Cloudflare
Vulnerable:	Redhat OpenStack Platform Operational Tools 9 Redhat Enterprise Linux OpenStack Platform Operational Tools fo 8.0 Redhat Enterprise Linux 7 golang Go 1.8.1 golang Go 1.8 golang Go 1.7.5 golang Go 1.7.4 golang Go 1.7.3 golang Go 1.7.2 golang Go 1.7.1 golang Go 1.6.4 golang Go 1.6.3 golang Go 1.6.2 golang Go 1.5.3 golang Go 1.5.2 golang Go 1.5.1 golang Go 1.4.2 golang Go 1.6.1 golang Go 1.5Rc1 golang Go 1.5.4 golang Go 1.5 golang Go 1.4 golang Go 1.3.2 golang Go 1.3.1 golang Go 1.3 golang Go 1.2 golang Go 1.1
Not Vulnerable:	golang Go 1.8.2 golang Go 1.7.6

Golang Go CVE-2017-8932 Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Golang Go CVE-2017-8932 Security Bypass Vulnerability

References:

• [security] Go 1.7.6 and Go 1.8.2 are released (Golang)
  
• crypto/elliptic,crypto/ecdsa: P256 amd64 assembly (Golang)
  
• crypto/elliptic: carry bug in x86-64 P-256 #20040 (Golang)
  
• crypto/elliptic: fix carry bug in x86-64 P-256 implementation. (Golang)
  
• 41070 (Merged as 9294fa2 ): crypto/elliptic: fix carry bug in x86-64 P-256 imple (Golang)
  
• Bug 1455191 golang: Elliptic curvers carry propagation issue in x86-64 P-256 (Redhat)
  
• CVE-2017-8932 (Redhat)
  
• Golang Homepage (Golang)