In Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect outputs, related to an underflow of the lowest limb during the final complete reduction in the P-224 field.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2021-01-26T02:23:18

Updated: 2024-08-03T16:45:51.301Z

Reserved: 2021-01-11T00:00:00

Link: CVE-2021-3114

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2021-01-26T18:16:27.567

Modified: 2023-11-07T03:37:55.523

Link: CVE-2021-3114

cve-icon Redhat

Severity : Moderate

Publid Date: 2021-01-20T00:00:00Z

Links: CVE-2021-3114 - Bugzilla