Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly return true in situations with a big.Int value that is not a valid field element.
History

Sun, 08 Sep 2024 18:45:00 +0000

Type Values Removed Values Added
CPEs cpe:/a:redhat:acm:2.4::el8
cpe:/a:redhat:acm:2.5::el8

Mon, 19 Aug 2024 22:30:00 +0000

Type Values Removed Values Added
CPEs cpe:/a:redhat:acm:2.4::el8
cpe:/a:redhat:acm:2.5::el8

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2022-02-11T00:00:00

Updated: 2024-08-03T03:51:45.994Z

Reserved: 2022-01-21T00:00:00

Link: CVE-2022-23806

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2022-02-11T01:15:07.747

Modified: 2023-04-20T00:15:07.847

Link: CVE-2022-23806

cve-icon Redhat

Severity : Moderate

Publid Date: 2022-02-11T00:00:00Z

Links: CVE-2022-23806 - Bugzilla