CVE-2023-24532

SOURCE - nist

Summary

The ScalarMult and ScalarBaseMult methods of the P256 Curve may return an incorrect result if called with some specific unreduced scalars (a scalar larger than the order of the curve). This does not impact usages of crypto/ecdsa or crypto/ecdh.

EPSS Score⁠: 0.00093 (0.392)

Common Weakness Enumeration (CWE)

SOURCE - nist

CWE-682⁠

Incorrect Calculation

SOURCE - redhat

CWE-682⁠

Incorrect Calculation

Sources (16)

My images

nist

CREATED

1 year ago

UPDATED

1 year ago

SOURCE IDCVE-2023-24532⁠

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-682⁠

CVSS SCORE

5.3medium

alpine

CREATED

1 year ago

UPDATED

1 month ago

SOURCE IDCVE-2023-24532⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM SOURCE

debian

CREATED

1 year ago

UPDATED

2 months ago

SOURCE IDCVE-2023-24532⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM SOURCE

ubuntu

CREATED

1 year ago

UPDATED

25 days ago

SOURCE IDCVE-2023-24532⁠

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

5.3medium

golang

CREATED

1 year ago

UPDATED

11 months ago

SOURCE IDGO-2023-1621⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM SOURCE

amazon

CREATED

1 year ago

UPDATED

1 year ago

SOURCE IDALAS-2023-1731⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

amazon

CREATED

1 year ago

UPDATED

1 year ago

SOURCE IDALAS-2023-2015⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

amazon

CREATED

10 months ago

UPDATED

10 months ago

SOURCE IDALAS-2023-2163⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

amazon

CREATED

7 months ago

UPDATED

4 months ago

SOURCE IDALAS-2023-1848⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

amazon

CREATED

2 months ago

UPDATED

2 months ago

SOURCE IDALAS2023-2023-175⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

bitnami

CREATED

8 months ago

UPDATED

8 months ago

SOURCE ID

BIT-2023-24532

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

bitnami

CREATED

2 months ago

UPDATED

2 months ago

SOURCE ID

BIT-golang-2023-24532

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

redhat

CREATED

1 year ago

UPDATED

6 months ago

SOURCE IDCVE-2023-24532⁠

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-682⁠

CVSS SCORE

5.3medium

suse

CREATED

1 year ago

UPDATED

8 months ago

SOURCE IDCVE-2023-24532⁠

EXPLOITABILITY SCORE

1.4

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

7.4high

chainguard

CREATED

1 year ago

UPDATED

2 months ago

SOURCE ID

CVE-2023-24532

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM SOURCE

wolfi

CREATED

1 year ago

UPDATED

2 months ago

SOURCE ID

CVE-2023-24532

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM SOURCE