PT-2022-7693 · Google +7 · Go +7

🗓️ 11 Feb 2022 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 26 Views

Curve.IsOnCurve may return true for invalid big integers, risking availability and correctness.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: CVE-2022-2879, CVE-2022-41715, CVE-2022-2880, CVE-2022-41717, CVE-2022-41716 may affect IBM CICS TX Advanced	16 Mar 202315:24	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Go may affect IBM CICS TX Standard	24 Feb 202310:43	–	ibm
IBM Security Bulletins	Security Bulletin:IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from openssl, pcre2 and Golang Go	31 Aug 202216:17	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities affect IBM Cloud Private - Golang (CVE-2021-41772,CVE-2021-41771)	22 Apr 202220:29	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for Febuary 2023	10 Mar 202318:29	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in Golang Go (CVE-2022-24675)	12 Jan 202321:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data Scheduling is vulnerable to multiple ansible-operator and opm vulnerabilities	20 Feb 202419:29	–	ibm
IBM Security Bulletins	Security Bulletin: Potential module resolution error in DataPower Operator	17 Jun 202221:14	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	15 Mar 202500:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium Insights is affected by multipe vulnerabilities	4 Feb 202221:33	–	ibm

Source	Link
github	www.github.com/gkrishnan724/CVE-2021-38297
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
security-tracker	www.security-tracker.debian.org/tracker/source-package/golang-1.7
errata	www.errata.almalinux.org/8/ALSA-2022-1819.html
safe-surf	www.safe-surf.ru/specialists/bulletins-nkcki/685443
safe-surf	www.safe-surf.ru/specialists/bulletins-nkcki/676590
ubuntu	www.ubuntu.com/security/CVE-2022-23806
bdu	www.bdu.fstec.ru/vul/2022-03899
osv	www.osv.dev/vulnerability/GO-2021-0319
cve	www.cve.mitre.org/cgi-bin/cvename.cgi

03 Dec 2024 00:00Current

7High risk

Vulners AI Score7

CVSS 27.8 - 9.4

CVSS 3.19.8

EPSS0.10874

SSVC

Curve.IsOnCurve Invalid big integers Panic risk Remote attack Go 1.16.14 Go 1.17.7