Incorrect calculation on P256 curves in crypto/internal/nistec
Priority LOW 26CWE-682Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · Low · None
- Fix status
- Partial Red Hat: 10 fixed, 16 without a fix
Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat.
Summary
The ScalarMult and ScalarBaseMult methods of the P256 Curve may return an incorrect result if called with some specific unreduced scalars (a scalar larger than the order of the curve). This does not impact usages of crypto/ecdsa or crypto/ecdh.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00817 57th percentileScored 2026-11-07
Fix Partial crypto/internal/nistec (Go standard library): 1.19.7, 1.20.2Red Hat: 10 advisoriesRed Hat: 10 fixed, 16 without a fix
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Go standard library | crypto/internal/nistec | before 1.19.7; 1.20.0-0 to before 1.20.2 | 1.19.7, 1.20.2 | Patch available | CNA |
- crypto/internal/nistec VendorGo standard library Affected before 1.19.7; 1.20.0-0 to before 1.20.2 Fixed in 1.19.7, 1.20.2 Patch available CNA
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:golang:go:*:*:*:*:*:*:*:* | before 1.19.7; 1.20.0 to before 1.20.2 | Vulnerable | Go standard library |
- cpe:2.3:a:golang:go:*:*:*:*:*:*:*:* Versions before 1.19.7; 1.20.0 to before 1.20.2 Vulnerable ·Go standard library
Remediation
- Fix · CNA crypto/internal/nistec (Go standard library) Fixed in 1.19.7, 1.20.2
Red Hat 10 advisories
- RHSA-2024:1383 Released 2024-03-19 · Red Hat rating ImportantRed Hat OpenShift Data Foundation 4.15.0 security, enhancement, & bug fix update
- RHODF 4.15 for RHEL 9 odf4/cephcsi-rhel9, odf4/mcg-core-rhel9, odf4/mcg-operator-bundle +23
- RHSA-2023:5947 Released 2023-10-26 · Red Hat rating ImportantRun Once Duration Override Operator for Red Hat OpenShift 1.0.1 security update
- RODOO 1.0 for RHEL 8 run-once-duration-override-operator/run-once-duration-override-rhel8
- RHSA-2023:5976 Released 2023-10-20 · Red Hat rating ImportantService Telemetry Framework 1.5.2 security update
- Service Telemetry Framework 1.5 for RHEL 8 stf/prometheus-webhook-snmp-rhel8, stf/service-telemetry-operator-bundle, stf/service-telemetry-rhel8-operator +4
Show 7 more Red Hat advisories
- RHSA-2023:5935 Released 2023-10-19 · Red Hat rating ImportantRed Hat OpenStack Platform 16.2.5 security update
- Red Hat OpenStack Platform 16.2 rhosp-rhel8/osp-director-agent, rhosp-rhel8/osp-director-downloader, rhosp-rhel8/osp-director-operator +1
- RHSA-2023:5314 Released 2023-09-20 · Red Hat rating ModerateOpenShift API for Data Protection (OADP) 1.1.6 security and bug fix update
- 8Base-OADP-1.1 oadp/oadp-kubevirt-velero-plugin-rhel8, oadp/oadp-velero-plugin-for-aws-rhel8, oadp/oadp-velero-plugin-for-csi-rhel8 +5
- RHSA-2023:4892 Released 2023-08-31 · Red Hat rating ModerateMigration Toolkit for Containers (MTC) 1.7.12 security and bug fix update
- 8Base-RHMTC-1.7 rhmtc/openshift-velero-plugin-rhel8
- RHSA-2023:4657 Released 2023-08-23 · Red Hat rating ModerateSecondary Scheduler Operator for Red Hat OpenShift 1.1.2 security update
- OSSO 1.1 for RHEL 8 openshift-secondary-scheduler-operator/secondary-scheduler-operator-rhel8
- RHSA-2023:4627 Released 2023-08-14 · Red Hat rating ImportantMigration Toolkit for Applications security and bug fix update
- MTA 6.2 for RHEL 8 mta/mta-hub-rhel9, mta/mta-operator-bundle, mta/mta-ui-rhel9 +1
- RHSA-2023:3319 Released 2023-05-25 · Red Hat rating Importantgo-toolset:rhel8 security update
- Red Hat Enterprise Linux AppStream (v. 8) delve-1.9.1-1.module+el8.8.0+16778+5fbb74f5.src::go-toolset:rhel8, delve-1.9.1-1.module+el8.8.0+16778+5fbb74f5.x86_64::go-toolset:rhel8, go-toolset-1.19.9-1.module+el8.8.0+18857+fca43658.aarch64::go-toolset:rhel8 +18
- RHSA-2023:3318 Released 2023-05-25 · Red Hat rating Importantgo-toolset and golang security update
- Red Hat Enterprise Linux AppStream (v. 9) golang-1.19.9-2.el9_2, golang-bin-1.19.9-2.el9_2, golang-docs-1.19.9-2.el9_2 +4
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Migration Toolkit for Virtualization | Affected | No fix yet |
| Network Observability Operator | Affected | No fix yet |
| OpenShift Developer Tools and Services | Affected | No fix yet |
| OpenShift Serverless | Affected | No fix yet |
| OpenShift Service Mesh 2 | Affected | No fix yet |
| Red Hat 3scale API Management Platform 2 | Affected | No fix yet |
| Red Hat Ceph Storage 3 | Affected | No fix planned: Out of support scope |
| Red Hat OpenShift Container Platform 4 | Affected | No fix yet |
| Red Hat OpenShift Data Science (RHODS) | Affected | No fix planned: Will not fix |
| Red Hat OpenShift Dev Spaces | Affected | No fix yet |
| Red Hat OpenShift Virtualization 4 | Affected | No fix yet |
| Red Hat OpenShift distributed tracing 2 | Affected | No fix yet |
| Red Hat OpenStack Platform 18.0 | Affected | No fix yet |
| Red Hat Storage 3 | Affected | No fix planned: Will not fix |
| Red Hat Web Terminal | Affected | No fix yet: Fix deferred |
| Red Hat build of Apicurio Registry 2 | Affected | No fix planned: Will not fix |
| 8Base-OADP-1.1 | Fixed | RHSA-2023:5314 |
| 8Base-RHMTC-1.7 | Fixed | RHSA-2023:4892 |
| MTA 6.2 for RHEL 8 | Fixed | RHSA-2023:4627 |
| OSSO 1.1 for RHEL 8 | Fixed | RHSA-2023:4657 |
| RHODF 4.15 for RHEL 9 | Fixed | RHSA-2024:1383 |
| RODOO 1.0 for RHEL 8 | Fixed | RHSA-2023:5947 |
| Red Hat Enterprise Linux AppStream (v. 8) | Fixed | RHSA-2023:3319 |
| Red Hat Enterprise Linux AppStream (v. 9) | Fixed | RHSA-2023:3318 |
| Red Hat OpenStack Platform 16.2 | Fixed | RHSA-2023:5935 |
| Service Telemetry Framework 1.5 for RHEL 8 | Fixed | RHSA-2023:5976 |
Not affected: 10 products
- 8Base-OADP-1.1
- 8Base-RHMTC-1.7
- Cryostat 2
- Logging Subsystem for Red Hat OpenShift
- MTA 6.2 for RHEL 8
- OSSO 1.1 for RHEL 8
- RHODF 4.15 for RHEL 9
- RODOO 1.0 for RHEL 8
- Red Hat Advanced Cluster Management for Kubernetes 2
- Red Hat Enterprise Linux AppStream (v. 9)
Timeline
- 2026-10-02 Threatist record created from CVE-2023-24532
- 2026-10-03 Alias added: GHSA-x2w5-7wp4-5qff
References
More Go standard library Go vulnerabilities
- TI-2020-00578 Improper certificate validation in Microsoft Windows KEVCVSS 3.1HIGH 8.1
- TI-2023-23979 The HTTP/2 protocol allows a denial of service (server resource consumption) because… KEVCVSS 3.1HIGH 7.5
- TI-2018-05208 The "go get" implementation in Go 1.9.4, when the -insecure command-line option is used… CVSS 3.1HIGH 8.8
- TI-2018-12083 Improper input validation in [UNKNOWN] golang CVSS 3.1HIGH 8.1
- TI-2024-16306 Mishandling of corrupt central directory record in archive/zip CVSS 3.1MEDIUM 5.5
- TI-2021-15910 Go before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a… CVSS 3.1CRITICAL 9.8
Sources
- CVE-2023-24532 · CVE Program
- CVE-2023-24532 · NVD
- FIRST EPSS
- GHSA-x2w5-7wp4-5qff · GitHub Advisory Database · CC BY 4.0
- CVE-2023-24532 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences