CVE-2016-9121

Published: Mar 28, 2017Modified: May 13, 2026

9.1

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Exploitability: 3.9 / Impact: 5.2

Source: NVD

Description

go-jose before 1.0.4 suffers from an invalid curve attack for the ECDH-ES algorithm. When deriving a shared key using ECDH-ES for an encrypted message, go-jose neglected to check that the received public key on a message is on the same curve as the static private key of the receiver, thus making it vulnerable to an invalid curve attack.

Affected (1)

Products: Go Jose Project: Go Jose

Go Jose Project

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Go Jose Project Go Jose	Up to 1.0.3

Related CWEs

Inadequate Encryption Strength

The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.

References (6)

http://www.openwall.com/lists/oss-security/2016/11/03/1

Source: support@hackerone.com

Mailing ListPatchThird Party Advisory

https://github.com/square/go-jose/commit/c7581939a3656bb65e89d64da0a52364a33d2507

Source: support@hackerone.com

Issue TrackingPatchThird Party Advisory

https://hackerone.com/reports/164590

Source: support@hackerone.com

Permissions Required

http://www.openwall.com/lists/oss-security/2016/11/03/1

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListPatchThird Party Advisory

https://github.com/square/go-jose/commit/c7581939a3656bb65e89d64da0a52364a33d2507

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingPatchThird Party Advisory

https://hackerone.com/reports/164590

Source: af854a3a-2127-422b-91ae-364da2661108

Permissions Required

Timeline

No history available yet.