The ScalarMult and ScalarBaseMult methods of the P256 Curve may return an incorrect result if called with some specific unreduced scalars (a scalar larger than the order of the curve). This does not impact usages of crypto/ecdsa or crypto/ecdh.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Mar 8, 2023 |
| Amazon Linux Ami 2 | — | Upgrade golang-miscUpgrade golang-testsUpgrade golang-binUpgrade golang-srcUpgrade golangUpgrade golang-docsUpgrade containerd-stressUpgrade containerd-debuginfoUpgrade golang-raceUpgrade containerdUpgrade golang-shared | Apr 21, 2023 | Mar 8, 2023 |
| Amazon_linux | — | Upgrade golang | Apr 21, 2023 | Mar 8, 2023 |
| Amazon_linux_2023 | — | Upgrade golang-binUpgrade golang-testsUpgrade golang-srcUpgrade golang-docsUpgrade golang-raceUpgrade golang-miscUpgrade golang-sharedUpgrade golang | Feb 17, 2025 | Mar 8, 2023 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Mar 8, 2023 |
| Freebsd | — | Upgrade go120Upgrade go119 | Mar 9, 2023 | Mar 8, 2023 |
| Redhat_linux | — | Upgrade golang-binUpgrade delve-debugsourceUpgrade golang-testsUpgrade delve-debuginfoUpgrade golang-raceUpgrade delveUpgrade golang-miscUpgrade go-toolsetUpgrade golangUpgrade golang-docsUpgrade golang-src | Sep 3, 2024 | Mar 8, 2023 |
| Suse | — | Upgrade go1.19-raceUpgrade go1.20-raceUpgrade go1.19-docUpgrade go1.20-docUpgrade go1.19Upgrade go1.20Upgrade container-suseconnect | Mar 15, 2023 | Mar 8, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 8, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub