GO-2022-0217 Denial of service affecting P-521 and P-384 curves in crypto/elliptic

🗓️ 24 May 2022 15:21:01Reported by GoogleType

osv

osv🔗 osv.dev👁 35 Views

Denial of service vulnerability in P-521 and P-384 elliptic curves implementatio

Reporter	Title	Published	Views	Family All 100
IBM Security Bulletins	Security Bulletin: IBM Event Streams is affected by Go vulnerabilities	29 Mar 201911:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Private for Data is affected by a vulnerability in Go Language (CVE-2019-6486)	3 Oct 201922:50	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Go affects IBM Watson Studio Local	20 Dec 201913:58	–	ibm
ALT Linux	Security fix for the ALT Linux 10 package golang version 1.11.5-alt1	24 Jan 201900:00	–	altlinux
Tenable Nessus	Amazon Linux 2 : golang (ALAS-2019-1172)	8 Mar 201900:00	–	nessus
Tenable Nessus	Amazon Linux AMI : golang (ALAS-2019-1172)	12 Mar 201900:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0069: go-toolset:rhel8 (ALINUX3-SA-2021:0069)	14 May 202500:00	–	nessus
Tenable Nessus	Debian DLA-1664-1 : golang security update	7 Feb 201900:00	–	nessus
Tenable Nessus	Debian DSA-4379-1 : golang-1.7 - security update	4 Feb 201900:00	–	nessus
Tenable Nessus	Debian DSA-4380-1 : golang-1.8 - security update	4 Feb 201900:00	–	nessus

Source	Link
go	www.go.dev/cl/159218
go	www.go.googlesource.com/go/+/193c16a3648b8670a762e925b6ac6e074f468a20
go	www.go.dev/issue/29903
groups	www.groups.google.com/g/golang-announce/c/mVeX35iXuSw

20 May 2024 16:03Current

7.7High risk

Vulners AI Score7.7

CVSS 26.4

CVSS 38.2

EPSS0.04326

dos vulnerability elliptic curves p-521 p-384 crypto tls x.509 certificates jwt tokens ecdh ecdsa cpu key recovery