CVE-2021-3114

golang: crypto/elliptic: incorrect operations on the P-224 curve

Published Jan 26, 2021 CVSS 3.1 · 6.5 Medium EPSS 2.7% KEV · Not listed
Description
In Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect outputs, related to an underflow of the lowest limb during the final complete reduction in the P-224 field.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-2591-1 golang-1.7 security update
Debian DLA Debian DLA DLA-2592-1 golang-1.8 security update
Debian DSA Debian DSA DSA-4848-1 golang-1.11 security update
EUVD EUVD EUVD-2021-26466 In Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect outputs, related to an underflow of the lowest limb during the final complete reduction in the P-224 field.
History

No history.