The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows a panic via long scalar input.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-go | Aug 22, 2024 | Apr 20, 2022 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-go-filesystemamazon-linux-ami-2-upgrade-go-rpm-macrosamazon-linux-ami-2-upgrade-go-rpm-templatesamazon-linux-ami-2-upgrade-go-srpm-macrosamazon-linux-ami-2-upgrade-golangamazon-linux-ami-2-upgrade-golang-binamazon-linux-ami-2-upgrade-golang-docsamazon-linux-ami-2-upgrade-golang-github-godbus-dbus-develamazon-linux-ami-2-upgrade-golang-github-gorilla-context-develamazon-linux-ami-2-upgrade-golang-github-gorilla-mux-develamazon-linux-ami-2-upgrade-golang-github-kr-pty-develamazon-linux-ami-2-upgrade-golang-github-syndtr-gocapability-develamazon-linux-ami-2-upgrade-golang-googlecode-net-develamazon-linux-ami-2-upgrade-golang-googlecode-sqlite-develamazon-linux-ami-2-upgrade-golang-miscamazon-linux-ami-2-upgrade-golang-raceamazon-linux-ami-2-upgrade-golang-sharedamazon-linux-ami-2-upgrade-golang-srcamazon-linux-ami-2-upgrade-golang-testsamazon-linux-ami-2-upgrade-golistamazon-linux-ami-2-upgrade-golist-debuginfoamazon-linux-ami-2-upgrade-runcamazon-linux-ami-2-upgrade-runc-debuginfo | Sep 30, 2022 | Apr 20, 2022 | |
| Amazon_linux | — | amazon-linux-upgrade-golang | Sep 30, 2022 | Apr 20, 2022 |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-compat-golang-github-cpuguy83-md2man-2-develamazon-linux-2023-upgrade-golangamazon-linux-2023-upgrade-golang-binamazon-linux-2023-upgrade-golang-docsamazon-linux-2023-upgrade-golang-github-cpuguy83-md2manamazon-linux-2023-upgrade-golang-github-cpuguy83-md2man-debuginfoamazon-linux-2023-upgrade-golang-github-cpuguy83-md2man-debugsourceamazon-linux-2023-upgrade-golang-github-cpuguy83-md2man-develamazon-linux-2023-upgrade-golang-miscamazon-linux-2023-upgrade-golang-raceamazon-linux-2023-upgrade-golang-sharedamazon-linux-2023-upgrade-golang-srcamazon-linux-2023-upgrade-golang-testsamazon-linux-2023-upgrade-golistamazon-linux-2023-upgrade-golist-debuginfoamazon-linux-2023-upgrade-golist-debugsource | Feb 17, 2025 | Apr 12, 2022 | |
| Centos_linux | — | centos-upgrade-delvecentos-upgrade-delve-debuginfocentos-upgrade-delve-debugsourcecentos-upgrade-go-toolsetcentos-upgrade-golangcentos-upgrade-golang-bincentos-upgrade-golang-docscentos-upgrade-golang-misccentos-upgrade-golang-racecentos-upgrade-golang-srccentos-upgrade-golang-tests | Jul 5, 2022 | Apr 20, 2022 |
| Freebsd | freebsd-upgrade-package-gofreebsd-upgrade-package-go117 | Nov 4, 2022 | May 2, 2022 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-lang-go | Aug 5, 2022 | Apr 20, 2022 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-golanghuawei-euleros-2_0_sp10-upgrade-golang-develhuawei-euleros-2_0_sp10-upgrade-golang-help | Aug 2, 2022 | Apr 20, 2022 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-golanghuawei-euleros-2_0_sp3-upgrade-golang-binhuawei-euleros-2_0_sp3-upgrade-golang-src | Oct 28, 2022 | Apr 20, 2022 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-golanghuawei-euleros-2_0_sp5-upgrade-golang-binhuawei-euleros-2_0_sp5-upgrade-golang-src | Jun 17, 2022 | Apr 20, 2022 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-golanghuawei-euleros-2_0_sp8-upgrade-golang-binhuawei-euleros-2_0_sp8-upgrade-golang-src | Jun 22, 2022 | Apr 20, 2022 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-golanghuawei-euleros-2_0_sp9-upgrade-golang-develhuawei-euleros-2_0_sp9-upgrade-golang-help | Jul 11, 2022 | Apr 20, 2022 | |
| Oracle_linux | — | oracle-linux-upgrade-delveoracle-linux-upgrade-golangoracle-linux-upgrade-golang-binoracle-linux-upgrade-golang-docsoracle-linux-upgrade-golang-miscoracle-linux-upgrade-golang-raceoracle-linux-upgrade-golang-srcoracle-linux-upgrade-golang-testsoracle-linux-upgrade-go-toolset | Jun 8, 2022 | Apr 12, 2022 |
| Redhat Openshift | linuxrpm-upgrade-buildahlinuxrpm-upgrade-butanelinuxrpm-upgrade-containernetworking-pluginslinuxrpm-upgrade-cri-olinuxrpm-upgrade-cri-toolslinuxrpm-upgrade-podmanlinuxrpm-upgrade-runclinuxrpm-upgrade-skopeo | Aug 11, 2022 | Apr 20, 2022 | |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-delveredhat-upgrade-delve-debuginforedhat-upgrade-delve-debugsourceredhat-upgrade-go-toolsetredhat-upgrade-golangredhat-upgrade-golang-binredhat-upgrade-golang-docsredhat-upgrade-golang-miscredhat-upgrade-golang-raceredhat-upgrade-golang-srcredhat-upgrade-golang-tests | Jul 5, 2022 | Apr 20, 2022 | |
| Rocky_linux | rocky-upgrade-delverocky-upgrade-delve-debuginforocky-upgrade-delve-debugsourcerocky-upgrade-go-toolsetrocky-upgrade-golangrocky-upgrade-golang-binrocky-upgrade-golang-race | Mar 12, 2024 | Apr 20, 2022 | |
| Splunk | splunk-upgrade-latest | Sep 30, 2025 | Apr 20, 2022 | |
| Suse | — | suse-upgrade-go1-17suse-upgrade-go1-17-docsuse-upgrade-go1-17-racesuse-upgrade-go1-18suse-upgrade-go1-18-docsuse-upgrade-go1-18-opensslsuse-upgrade-go1-18-openssl-docsuse-upgrade-go1-18-openssl-racesuse-upgrade-go1-18-race | Oct 26, 2022 | Apr 20, 2022 |
| Ubuntu | ubuntu-upgrade-golang-1-18 | Nov 19, 2024 | Apr 20, 2022 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Apr 20, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub