5.3

CVE-2023-24532: Incorrect calculation on P256 curves in crypto/internal/nistec

Modified
AliasesUBUNTU-CVE-2023-24532DEBIAN-CVE-2023-24532CGA-2697-xcvj-4xwq
Published 08-03-2023Last modified 02-08-2024

Vulnerability summary

CVE-2023-24532 is a medium (CVSS 5.3) Incorrect Calculation vulnerability in go standard library crypto/internal/nistec. EPSS estimates a 0.82% chance of exploitation in the next 30 days, higher than 57.1% of scored vulnerabilities.

Priority
Routine

Not severe (CVSS 5.3, network access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?
CVSS score
5.3/10
010
Medium · v3.1 (NVD)
EPSS score
0.82%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 6 · Related 10
MGASA-2023-0109RHSA-2023:3318RHSA-2023:3319SUSE-SU-2023:0733-1SUSE-SU-2023:0735-1SUSE-SU-2023:0871-1

Timeline

  1. 08-03-2023
    PublishedVulnerability first disclosed.
  2. 02-08-2024
    Last modifiedVulnerability information updated.

Description

The ScalarMult and ScalarBaseMult methods of the P256 Curve may return an incorrect result if called with some specific unreduced scalars (a scalar larger than the order of the curve). This does not impact usages of crypto/ecdsa or crypto/ecdh.

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.82%

Chance of exploitation in the next 30 days

Percentile

57%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.82% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Version check

Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.

Chainguard11 products
  • go-1.20< 1.20.2-r0
  • katib-earlystopping< 0.19.0-r31
  • katib-suggestion-goptuna-compatAll versions (No fix recorded)
  • katib-suggestion-hyperband< 0.19.0-r31
  • katib-suggestion-hyperopt< 0.19.0-r31 | < 0.19.0-r40
Wolfi11 products
  • go-1.20< 1.20.2-r0
  • katib-earlystopping< 0.19.0-r31
  • katib-suggestion-goptuna-compatAll versions (No fix recorded)
  • katib-suggestion-hyperband< 0.19.0-r31
  • katib-suggestion-hyperopt< 0.19.0-r31 | < 0.19.0-r40
Ubuntu9 products
  • golang-1.10All versions (No fix recorded)
  • golang-1.13All versions (No fix recorded)
  • golang-1.14All versions (No fix recorded)
  • golang-1.16All versions (No fix recorded)
  • golang-1.17All versions (No fix recorded)
Opensuse2 products
  • go1.19&distro=openSUSE Tumbleweed< 1.19.7-1.1
  • go1.20&distro=openSUSE Tumbleweed< 1.20.2-1.1
Alpine1 product
  • go≥ 1.20.0, < 1.19.7-r0 | ≥ 1.20.0, < 1.20.2-r0
Debian1 product
  • golang-1.19< 1.19.8-2
Go1 product
  • stdlib≥ 1.20.0-0, < 1.20.2
Go standard library1 product
Golang1 product
  • go< 1.19.7 | ≥ 1.20.0, < 1.20.2

9 vendors · 38 products

References

16 links
Show all 16 references