The vulnerability of the ScalarMult and ScalarBaseMult methods in the Go programming language allows attackers to compromise the integrity of the protected information.

The Go language ScalarMult and ScalarBaseMult flaws allow remote attackers to compromise integrity via incorrect calculations.

Reporter	Title	Published	Views	Family All 147
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operands and operator are vulnerable to [CVE-2023-24532]	28 Jun 202315:04	–	ibm
IBM Security Bulletins	Security Bulletin: Mutiple Vulnerabilties affects IBM Watson Machine Learning Accelerator 3.5.0 for Cloud Pak for Data 4.6.5	8 Feb 202419:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data Scheduling is vulnerable to multiple ansible-operator and opm vulnerabilities	20 Feb 202419:29	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in GoLang Go and Kubernetes affect IBM watsonx.data	18 Sep 202416:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Golang Go affect Cloud Pak System	2 Jan 202411:59	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Go affects watsonx.data	5 Sep 202418:34	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Golang Go affect watsonx.data	3 Sep 202420:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is affected by multiple vulnerabilities in Golang Go	5 Jul 202321:52	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in golang affect IBM Db2® REST	1 May 202314:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data is vulnerable to several issues due to go modules used in nginx ( CVE-2023-24532, CVE-2022-41724, CVE-2022-41725, CVE-2022-41723 )	8 Aug 202415:20	–	ibm

Vulners

Node

go goRange1.20.0–1.20.2

go goRange<1.19.7

Source	Link
go	www.go.dev/cl/471255
go	www.go.dev/issue/58647
groups	www.groups.google.com/g/golang-announce/c/3-TpUx48iQY
pkg	www.pkg.go.dev/vuln/GO-2023-1621
golangtutorial	www.golangtutorial.dev/news/go-1.20.2-and-go-1.19.7-versions-released/
security-tracker	www.security-tracker.debian.org/tracker/CVE-2023-24532
suse	www.suse.com/security/cve/CVE-2023-24532.html
web	www.web.nvd.nist.gov/view/vuln/detail

17 May 2023 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 25

CVSS 35.3

EPSS0.00817