DEBIAN-CVE-2023-24532

DEBIAN-CVE-2023-24532 PUBLISHED CVSS 5.300000190734863 MEDIUM

The ScalarMult and ScalarBaseMult methods of the P256 Curve may return an incorrect result if called with some specific unreduced scalars (a scalar larger than the order of the curve). This does not impact usages of crypto/ecdsa or crypto/ecdh.

Risk Scores

CVSS 3.1

5.300000190734863

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Affected Products

Vendor	Product	Versions
Debian:12	golang-1.19	0, 0, 0
Debian:11	golang-1.15	0, 1.15.15-1, 1.15.15-1

Timeline

Mar 8, 2023 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2023-24532 advisory

Open in Interactive Console →