Vulnerability Description
A bug in the standard library ScalarMult implementation of curve P-256 for amd64 architectures in Go before 1.7.6 and 1.8.x before 1.8.2 causes incorrect results to be generated for specific input points. An adaptive attack can be mounted to progressively extract the scalar input to ScalarMult by submitting crafted points and observing failures to the derive correct output. This leads to a full key recovery attack against static ECDH, as used in popular JWT libraries.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Golang | Go | <= 1.7.5 |
| Novell | Suse Package Hub For Suse Linux Enterprise | 12 |
| Fedoraproject | Fedora | 25 |
| Opensuse | Leap | 42.2 |
Related Weaknesses (CWE)
References
- http://lists.opensuse.org/opensuse-updates/2017-06/msg00079.htmlPatchThird Party Advisory
- http://lists.opensuse.org/opensuse-updates/2017-06/msg00080.htmlPatchThird Party Advisory
- https://access.redhat.com/errata/RHSA-2017:1859
- https://bugzilla.redhat.com/show_bug.cgi?id=1455191Issue TrackingThird Party Advisory
- https://github.com/golang/go/commit/9294fa2749ffee7edbbb817a0ef9fe633136fa9cIssue TrackingPatchThird Party Advisory
- https://github.com/golang/go/issues/20040Third Party Advisory
- https://go-review.googlesource.com/c/41070/Vendor Advisory
- https://groups.google.com/d/msg/golang-announce/B5ww0iFt1_Q/TgUFJV14BgAJVendor Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro
- http://lists.opensuse.org/opensuse-updates/2017-06/msg00079.htmlPatchThird Party Advisory
- http://lists.opensuse.org/opensuse-updates/2017-06/msg00080.htmlPatchThird Party Advisory
- https://access.redhat.com/errata/RHSA-2017:1859
- https://bugzilla.redhat.com/show_bug.cgi?id=1455191Issue TrackingThird Party Advisory
- https://github.com/golang/go/commit/9294fa2749ffee7edbbb817a0ef9fe633136fa9cIssue TrackingPatchThird Party Advisory
- https://github.com/golang/go/issues/20040Third Party Advisory
FAQ
What is CVE-2017-8932?
CVE-2017-8932 is a vulnerability with a CVSS score of 5.9 (MEDIUM). A bug in the standard library ScalarMult implementation of curve P-256 for amd64 architectures in Go before 1.7.6 and 1.8.x before 1.8.2 causes incorrect results to be generated for specific input poi...
How severe is CVE-2017-8932?
CVE-2017-8932 has been rated MEDIUM with a CVSS base score of 5.9/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-8932?
Check the references section above for vendor advisories and patch information. Affected products include: Golang Go, Novell Suse Package Hub For Suse Linux Enterprise, Fedoraproject Fedora, Opensuse Leap.