Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly return true in situations with a big.Int value that is not a valid field element.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-delvealma-upgrade-go-toolsetalma-upgrade-golangalma-upgrade-golang-binalma-upgrade-golang-docsalma-upgrade-golang-miscalma-upgrade-golang-racealma-upgrade-golang-srcalma-upgrade-golang-tests | May 13, 2022 | Feb 11, 2022 | |
| Alpine Linux | alpine-linux-upgrade-go | Aug 22, 2024 | Feb 11, 2022 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-golangamazon-linux-ami-2-upgrade-golang-binamazon-linux-ami-2-upgrade-golang-docsamazon-linux-ami-2-upgrade-golang-miscamazon-linux-ami-2-upgrade-golang-raceamazon-linux-ami-2-upgrade-golang-sharedamazon-linux-ami-2-upgrade-golang-srcamazon-linux-ami-2-upgrade-golang-tests | Sep 30, 2022 | Feb 11, 2022 | |
| Amazon_linux | — | amazon-linux-upgrade-golang | Feb 21, 2023 | Feb 11, 2022 |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-golangamazon-linux-2023-upgrade-golang-binamazon-linux-2023-upgrade-golang-docsamazon-linux-2023-upgrade-golang-miscamazon-linux-2023-upgrade-golang-raceamazon-linux-2023-upgrade-golang-sharedamazon-linux-2023-upgrade-golang-srcamazon-linux-2023-upgrade-golang-tests | Feb 17, 2025 | Feb 11, 2022 | |
| Centos_linux | — | centos-upgrade-delvecentos-upgrade-delve-debuginfocentos-upgrade-delve-debugsourcecentos-upgrade-go-toolsetcentos-upgrade-golangcentos-upgrade-golang-bincentos-upgrade-golang-docscentos-upgrade-golang-misccentos-upgrade-golang-racecentos-upgrade-golang-srccentos-upgrade-golang-tests | May 13, 2022 | Feb 11, 2022 |
| Debian | debian-upgrade-golang-1-15 | Apr 29, 2022 | Feb 11, 2022 | |
| Freebsd | freebsd-upgrade-package-go | Nov 4, 2022 | Feb 18, 2022 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-lang-go | Aug 5, 2022 | Feb 11, 2022 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-golanghuawei-euleros-2_0_sp10-upgrade-golang-develhuawei-euleros-2_0_sp10-upgrade-golang-help | Jun 7, 2022 | Feb 11, 2022 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-golanghuawei-euleros-2_0_sp5-upgrade-golang-binhuawei-euleros-2_0_sp5-upgrade-golang-src | Apr 26, 2022 | Feb 11, 2022 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-golanghuawei-euleros-2_0_sp8-upgrade-golang-binhuawei-euleros-2_0_sp8-upgrade-golang-src | Apr 26, 2022 | Feb 11, 2022 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-golanghuawei-euleros-2_0_sp9-upgrade-golang-develhuawei-euleros-2_0_sp9-upgrade-golang-help | Jun 16, 2022 | Feb 11, 2022 | |
| Oracle_linux | — | oracle-linux-upgrade-delveoracle-linux-upgrade-golangoracle-linux-upgrade-golang-binoracle-linux-upgrade-golang-docsoracle-linux-upgrade-golang-miscoracle-linux-upgrade-golang-raceoracle-linux-upgrade-golang-srcoracle-linux-upgrade-golang-testsoracle-linux-upgrade-go-toolset | May 18, 2022 | Feb 11, 2022 |
| Rapid7 Scan Assistant | — | rapid7-scan-assistant-upgrade-latest | Jan 3, 2024 | Feb 11, 2022 |
| Redhat Openshift | linuxrpm-upgrade-buildahlinuxrpm-upgrade-butanelinuxrpm-upgrade-containernetworking-pluginslinuxrpm-upgrade-cri-olinuxrpm-upgrade-cri-toolslinuxrpm-upgrade-ignitionlinuxrpm-upgrade-openshift-clientslinuxrpm-upgrade-podmanlinuxrpm-upgrade-runclinuxrpm-upgrade-skopeo | Aug 11, 2022 | Feb 11, 2022 | |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-delveredhat-upgrade-delve-debuginforedhat-upgrade-delve-debugsourceredhat-upgrade-go-toolsetredhat-upgrade-golangredhat-upgrade-golang-binredhat-upgrade-golang-docsredhat-upgrade-golang-miscredhat-upgrade-golang-raceredhat-upgrade-golang-srcredhat-upgrade-golang-tests | May 13, 2022 | Feb 11, 2022 | |
| Rocky_linux | rocky-upgrade-delverocky-upgrade-delve-debuginforocky-upgrade-delve-debugsourcerocky-upgrade-go-toolsetrocky-upgrade-golangrocky-upgrade-golang-binrocky-upgrade-golang-race | Mar 5, 2024 | Feb 11, 2022 | |
| Splunk | splunk-upgrade-latest | Sep 30, 2025 | Feb 11, 2022 | |
| Suse | — | suse-upgrade-go1-16suse-upgrade-go1-16-docsuse-upgrade-go1-16-racesuse-upgrade-go1-17suse-upgrade-go1-17-docsuse-upgrade-go1-17-racesuse-upgrade-google-guest-agentsuse-upgrade-google-osconfig-agent | Mar 5, 2022 | Feb 11, 2022 |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Feb 11, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub