Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-x2w5-7wp4-5qff

Опубликовано: 08 мар. 2023
Источник: github
Github: Не прошло ревью

Описание

The ScalarMult and ScalarBaseMult methods of the P256 Curve may return an incorrect result if called with some specific unreduced scalars (a scalar larger than the order of the curve). This does not impact usages of crypto/ecdsa or crypto/ecdh.

The ScalarMult and ScalarBaseMult methods of the P256 Curve may return an incorrect result if called with some specific unreduced scalars (a scalar larger than the order of the curve). This does not impact usages of crypto/ecdsa or crypto/ecdh.

EPSS

Процентиль: 54%
0.00817
Низкий

Связанные уязвимости

CVSS3: 5.3
ubuntu
больше 3 лет назад

The ScalarMult and ScalarBaseMult methods of the P256 Curve may return an incorrect result if called with some specific unreduced scalars (a scalar larger than the order of the curve). This does not impact usages of crypto/ecdsa or crypto/ecdh.

CVSS3: 5.3
redhat
больше 3 лет назад

The ScalarMult and ScalarBaseMult methods of the P256 Curve may return an incorrect result if called with some specific unreduced scalars (a scalar larger than the order of the curve). This does not impact usages of crypto/ecdsa or crypto/ecdh.

CVSS3: 5.3
nvd
больше 3 лет назад

The ScalarMult and ScalarBaseMult methods of the P256 Curve may return an incorrect result if called with some specific unreduced scalars (a scalar larger than the order of the curve). This does not impact usages of crypto/ecdsa or crypto/ecdh.

CVSS3: 5.3
msrc
6 месяцев назад

Incorrect calculation on P256 curves in crypto/internal/nistec

CVSS3: 5.3
debian
больше 3 лет назад

The ScalarMult and ScalarBaseMult methods of the P256 Curve may return ...

EPSS

Процентиль: 54%
0.00817
Низкий