Code injection

🗓️ 29 Jul 2022 19:15:00Reported by PRIOn knowledge baseType

When compressing or decompressing a point on the NIST P-256 elliptic curve with an X coordinate of zero, the resulting output is not properly reduced modulo the P-256 field prime and is invalid. The resulting output will cause an error when used in other operations. This may be leveraged by an attacker to cause an error scenario in applications which use the library, resulting in a limited denial of service for an individual user

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2022-23002	29 Jul 202219:15	–	attackerkb
Circl	CVE-2022-23002	29 Jul 202222:13	–	circl
CNNVD	Western Digital Sweet B 安全漏洞	29 Jul 202200:00	–	cnnvd
CVE	CVE-2022-23002	29 Jul 202218:52	–	cve
Cvelist	CVE-2022-23002 Point Compression/Decompression of NIST P-256 points with X coordinate of zero	29 Jul 202218:52	–	cvelist
EUVD	EUVD-2022-28113	3 Oct 202520:07	–	euvd
NVD	CVE-2022-23002	29 Jul 202219:15	–	nvd
Positive Technologies	PT-2022-15771 · Western Digital +1 · Sweet B Library +1	29 Jul 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-23002	9 Jan 202609:15	–	redhatcve