Lucene search
HistoryMar 08, 2023 - 8:15 p.m.
CVE-2023-24533
p-256 scalars
incorrect results
attack vulnerability
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS
0.001
Percentile
38.8%
Multiplication of certain unreduced P-256 scalars produce incorrect results. There are no protocols known at this time that can be attacked due to this.
Affected configurations
Node
nistec_projectnistecRange<0.0.2go
| Vendor | Product | Version | CPE |
|---|---|---|---|
| nistec_project | nistec | * | cpe:2.3:a:nistec_project:nistec:*:*:*:*:*:go:*:* |
Related
gitlab
gitlab
osv
osv
CVE-2023-24533
2023-03-08 20:15:09
Incorrect multiplication of unreduced P-256 scalars in filippo.io/nistec
2023-02-28 22:54:56
github
github
veracode
veracode
Incorrect Calculation
2023-03-09 02:51:37
prion
prion
Design/Logic Flaw
2023-03-08 20:15:00
cvelist
cvelist
cve
cve
CVE-2023-24533
2023-03-08 20:15:09
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS
0.001
Percentile
38.8%
Related for NVD:CVE-2023-24533