NVD

Id
88200  
Name
CVE-2017-8932  
Description
A bug in the standard library ScalarMult implementation of curve P-256 for amd64 architectures in Go before 1.7.6 and 1.8.x before 1.8.2 causes incorrect results to be generated for specific input points. An adaptive attack can be mounted to progressively extract the scalar input to ScalarMult by submitting crafted points and observing failures to the derive correct output. This leads to a full key recovery attack against static ECDH, as used in popular JWT libraries.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-07-18  
Published
2017-07-06  
Modified Date
2017-07-17  
Seq
2017-8932  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
423733 88200 CVE-2017-6983 https://support.apple.com/HT207797  View
423734 88200 CVE-2017-6983 https://support.apple.com/HT207798  View
423735 88200 CVE-2017-6983 https://support.apple.com/HT207797  View
423736 88200 CVE-2017-6983 https://support.apple.com/HT207798  View
430693 88200 CVE-2017-1000059 https://www.compass-security.com/research/advisories/  View
430694 88200 CVE-2017-1000059 https://www.compass-security.com/research/advisories/  View

Related JVN