CVE-2022-28327

Published: Apr 20, 2022Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows a panic via long scalar input.

Affected (7)

Products: Golang: Go · Fedoraproject: Extra Packages For Enterprise Linux, Fedora

Golang

1 product

Fedoraproject

2 products

Extra Packages For Enterprise Linux

Fedora

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Golang Go	Before 1.17.9
Golang Go	From 1.18.0 to 1.18.1

Configuration B

5 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Extra Packages For Enterprise Linux	Version 7.0
Fedoraproject Extra Packages For Enterprise Linux	Version 8.0
Fedoraproject Fedora	Version 34
Fedoraproject Fedora	Version 35
Fedoraproject Fedora	Version 36

References (24)

https://cert-portal.siemens.com/productcert/pdf/ssa-744259.pdf

Source: cve@mitre.org

https://groups.google.com/g/golang-announce

Source: cve@mitre.org

Mailing ListVendor Advisory

https://groups.google.com/g/golang-announce/c/oecdBNLOml8

Source: cve@mitre.org

Mailing ListRelease NotesVendor Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/42TYZC4OAY54TO75FBEFAPV5G7O4D5TM/

Source: cve@mitre.org

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F3BMW5QGX53CMIJIZWKXFKBJX2C5GWTY/

Source: cve@mitre.org

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NY6GEAJMNKKMU5H46QO4D7D6A24KSPXE/

Source: cve@mitre.org

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RCRSABD6CUDIZULZPZL5BJ3ET3A2NEJP/

Source: cve@mitre.org

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RQXU752ALW53OJAF5MG3WMR5CCZVLWW6/

Source: cve@mitre.org

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z55VUVGO7E5PJFXIOVAY373NZRHBNCI5/

Source: cve@mitre.org

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZY2SLWOQR4ZURQ7UBRZ7JIX6H6F5JHJR/

Source: cve@mitre.org

https://security.gentoo.org/glsa/202208-02

Source: cve@mitre.org

Third Party Advisory

https://security.netapp.com/advisory/ntap-20220915-0010/

Source: cve@mitre.org

Third Party Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-744259.pdf