CVE-2016-9121 Elliptic Curve Key Disclosure in go-jose
CriticalCVSS 9.1
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
go-jose before 1.0.4 suffers from an invalid curve attack for the ECDH-ES algorithm. When deriving a shared key using ECDH-ES for an encrypted message, go-jose neglected to check that the received public key on a message is on the same curve as the static private key of the receiver, thus making it vulnerable to an invalid curve attack.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gopkg.in/square/go-jose.v1(Go) | < 1.0.4 | 1.0.4 |
| square github.com/square/go-jose(Go) | < 1.0.4 | 1.0.4 |
| debian/golang-gopkg-square-go-jose.v1(Debian:12) | < 1.0.5-1 | 1.0.5-1 |
| debian/golang-gopkg-square-go-jose.v1(Debian:13) | < 1.0.5-1 | 1.0.5-1 |
| debian/golang-gopkg-square-go-jose.v1(Debian:14) | < 1.0.5-1 | 1.0.5-1 |
| go-jose project go-jose | <= 1.0.3 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com issue-tracking patch third-party-advisory
- hackerone.com permissions-required
- www.openwall.com
- pkg.go.dev
- github.com
- Debian Security Tracker CVE-2016-9121 vendor-advisory
- www.openwall.com mailing-list patch third-party-advisory