Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.3
CVE-2023-24532: Go P256 functions may give wrong result with oversized numbers
CVE-2023-24532 · published 3 years ago
Summary
The P256 math functions in Go’s cryptography library can produce incorrect values when they are given numbers larger than the curve’s allowed range. This only affects the low‑level P256 operations, not higher‑level features like digital signatures or key exchange. Update to a newer Go release or ensure only properly reduced numbers are used with these functions.
What to do
- Update debian golang-1.19 to version 1.19.8-2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Debian:12 | debian | golang-1.19 |
< 1.19.8-2 Fix: upgrade to 1.19.8-2
|
| – | golang | go |
< 1.19.7 >= 1.20.0, < 1.20.2 cpe:2.3:a:golang:go:*:*:*:*:*:*:*:* |
| Ubuntu:14.04:LTS | canonical | golang-1.10 | All versions |
| Ubuntu:16.04:LTS | canonical | golang-1.6 | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | golang-1.13 | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | golang-1.18 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | golang-1.16 | All versions |
| Ubuntu:18.04:LTS | canonical | golang-1.8 | All versions |
| Ubuntu:18.04:LTS | canonical | golang-1.9 | All versions |
| Ubuntu:20.04:LTS | canonical | golang-1.14 | All versions |
| Ubuntu:22.04:LTS | canonical | golang-1.17 | All versions |
Original advisory text
Incorrect calculation on P256 curves in crypto/internal/nistec
The ScalarMult and ScalarBaseMult methods of the P256 Curve may return an incorrect result if called with some specific unreduced scalars (a scalar larger than the order of the curve). This does not impact usages of crypto/ecdsa or crypto/ecdh.
References
- https://security-tracker.debian.org/tracker/CVE-2023-24532 Vendor Advisory
- https://go.dev/cl/471255 URL
- https://go.dev/issue/58647 URL
- https://ubuntu.com/security/CVE-2023-24532 Third Party Advisory
- https://golangtutorial.dev/news/go-1.20.2-and-go-1.19.7-versions-released/ Third Party Advisory
- https://github.com/golang/go/issues/58647 Third Party Advisory
- https://go-review.googlesource.com/c/go/+/471256 Third Party Advisory
- https://github.com/golang/go/commit/602eeaab387f24a4b28c5eccbb50fa934f3bc3c4 Third Party Advisory
- https://github.com/golang/go/commit/639b67ed114151c0d786aa26e7faeab942400703 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2023-24532 Third Party Advisory
- https://groups.google.com/g/golang-announce/c/3-TpUx48iQY URL
- https://pkg.go.dev URL
- https://pkg.go.dev/vuln/GO-2023-1621 URL
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/24xxx/CVE-2023-24532... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-24532 Vendor Advisory
- https://security.netapp.com/advisory/ntap-20230331-0011/ Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Severity
5.3
Medium
Type
CWE-682Incorrect Calculation
Timeline
Published8 Mar 2023
Updated4 Nov 2026
First seen15 Sep 2026
Sources
DEBIAN-CVE-2023-24532 · OSV
CVE-2023-24532 · NVD
UBUNTU-CVE-2023-24532 · OSV
CVE-2023-24532 · OSV
Track software like this
Free during beta