Description
In Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect outputs, related to an underflow of the lowest limb during the final complete reduction in the P-224 field.
Scores
CVSS v3
6.5
EPSS
0.0012
EPSS Percentile
30.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Details
CWE
CWE-682
Status
published
Products (6)
debian/debian_linux
9.0
debian/debian_linux
10.0
fedoraproject/fedora
33
golang/go
< 1.14.14
netapp/cloud_insights_telegraf_agent
netapp/storagegrid
Published
Jan 26, 2021
Tracked Since
Feb 18, 2026