Vulnerability CVE-2017-8932

Vulnerability Name:

CVE-2017-8932 (CCN-128450)

Assigned:

2017-05-23

Published:

2017-05-23

Updated:

2019-10-03

Summary:

A bug in the standard library ScalarMult implementation of curve P-256 for amd64 architectures in Go before 1.7.6 and 1.8.x before 1.8.2 causes incorrect results to be generated for specific input points. An adaptive attack can be mounted to progressively extract the scalar input to ScalarMult by submitting crafted points and observing failures to the derive correct output. This leads to a full key recovery attack against static ECDH, as used in popular JWT libraries.

CVSS v3 Severity:

5.9 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)
5.2 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): High Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): None Availibility (A): None

7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
6.4 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): Low

4.8 Medium (REDHAT CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)
4.2 Medium (REDHAT Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): High Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): None

CVSS v2 Severity:

4.3 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): None Availibility (A): None

7.5 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

Vulnerability Type:

CWE-682

Vulnerability Consequences:

Gain Access

References:

Source: MITRE
Type: CNA
CVE-2017-8932

Source: SUSE
Type: Patch, Third Party Advisory
openSUSE-SU-2017:1649

Source: SUSE
Type: Patch, Third Party Advisory
openSUSE-SU-2017:1650

Source: REDHAT
Type: UNKNOWN
RHSA-2017:1859

Source: CCN
Type: Red Hat Bugzilla Bug 1455191
CVE-2017-8932 golang: Elliptic curvers carry propagation issue in x86-64 P-256 [fedora-all]

Source: MISC
Type: Issue Tracking, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1455191

Source: XF
Type: UNKNOWN
golang-cve20178932-weak-security(128450)

Source: CONFIRM
Type: Issue Tracking, Patch, Third Party Advisory
https://github.com/golang/go/commit/9294fa2749ffee7edbbb817a0ef9fe633136fa9c

Source: CCN
Type: Golang GIT Repository
crypto/elliptic: carry bug in x86-64 P-256 #20040

Source: CONFIRM
Type: Third Party Advisory
https://github.com/golang/go/issues/20040

Source: CONFIRM
Type: Vendor Advisory
https://go-review.googlesource.com/c/41070/

Source: MLIST
Type: Vendor Advisory
[golang-announce] 20170523 [security] Go 1.7.6 and Go 1.8.2 are released

Source: FEDORA
Type: Third Party Advisory
FEDORA-2017-278f46fcd6

Vulnerable Configuration:

Configuration 1:

cpe:/a:golang:go:*:*:*:*:*:*:*:* (Version <= 1.7.5)

OR cpe:/a:golang:go:1.8:*:*:*:*:*:*:*

OR cpe:/a:golang:go:1.8.1:*:*:*:*:*:*:*

Configuration 2:

cpe:/a:novell:suse_package_hub_for_suse_linux_enterprise:12:*:*:*:*:*:*:*

OR cpe:/o:fedoraproject:fedora:25:*:*:*:*:*:*:*

OR cpe:/o:opensuse:leap:42.2:*:*:*:*:*:*:*

Configuration RedHat 1:

cpe:/o:redhat:enterprise_linux:7:*:*:*:*:*:*:*

Configuration RedHat 2:

cpe:/o:redhat:enterprise_linux:7::server:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:20178932	V	CVE-2017-8932	2023-06-22
oval:org.opensuse.security:def:8012	P	go-1.19-150000.3.26.1 on GA media (Moderate)	2023-06-20
oval:org.opensuse.security:def:112331	P	go1.12-1.12.17-4.8 on GA media (Moderate)	2022-01-17
oval:org.opensuse.security:def:112327	P	go-1.17-1.1 on GA media (Moderate)	2022-01-17
oval:org.opensuse.security:def:112344	P	go1.9-1.9.7-11.2 on GA media (Moderate)	2022-01-17
oval:org.opensuse.security:def:112329	P	go1.10-1.10.8-8.2 on GA media (Moderate)	2022-01-17
oval:org.opensuse.security:def:112330	P	go1.11-1.11.13-10.5 on GA media (Moderate)	2022-01-17
oval:org.opensuse.security:def:105859	P	Security update for java-11-openjdk (Important)	2021-11-16
oval:org.opensuse.security:def:105850	P	Security update for busybox (Important)	2021-10-27
oval:org.opensuse.security:def:105851	P	Security update for libvirt (Important)	2021-10-27
oval:org.opensuse.security:def:105852	P	go1.12-1.12.17-4.8 on GA media (Moderate)	2021-10-01
oval:org.opensuse.security:def:105848	P	go-1.17-1.1 on GA media (Moderate)	2021-10-01
oval:org.opensuse.security:def:25712	P	Security update for python36 (Moderate)	2020-12-01
oval:org.opensuse.security:def:25222	P	Security update for java-1_8_0-openjdk (Important)	2020-12-01
oval:org.opensuse.security:def:25566	P	Security update for openexr (Moderate)	2020-12-01
oval:org.opensuse.security:def:24950	P	Security update for openssh (Moderate)	2020-12-01
oval:org.opensuse.security:def:26350	P	Security update for ansible (Moderate)	2020-12-01
oval:org.opensuse.security:def:25279	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:25654	P	Security update for samba (Important)	2020-12-01
oval:org.opensuse.security:def:25014	P	Security update for webkit2gtk3 (Important)	2020-12-01
oval:org.opensuse.security:def:26385	P	Security update for go (Moderate)	2020-12-01
oval:org.opensuse.security:def:25363	P	Security update for samba (Moderate)	2020-12-01
oval:org.opensuse.security:def:25668	P	Security update for python3 (Moderate)	2020-12-01
oval:org.opensuse.security:def:25141	P	Security update for libvirt (Moderate)	2020-12-01
oval:org.opensuse.security:def:25513	P	Security update for java-11-openjdk (Important)	2020-12-01
oval:org.opensuse.security:def:24939	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:com.redhat.rhsa:def:20171859	P	RHSA-2017:1859: golang security, bug fix, and enhancement update (Moderate)	2017-08-01
oval:com.ubuntu.cosmic:def:201789320000000	V	CVE-2017-8932 on Ubuntu 18.10 (cosmic) - low.	2017-07-06
oval:com.ubuntu.trusty:def:20178932000	V	CVE-2017-8932 on Ubuntu 14.04 LTS (trusty) - low.	2017-07-06
oval:com.ubuntu.bionic:def:201789320000000	V	CVE-2017-8932 on Ubuntu 18.04 LTS (bionic) - low.	2017-07-06
oval:com.ubuntu.artful:def:20178932000	V	CVE-2017-8932 on Ubuntu 17.10 (artful) - low.	2017-07-06
oval:com.ubuntu.xenial:def:20178932000	V	CVE-2017-8932 on Ubuntu 16.04 LTS (xenial) - low.	2017-07-06
oval:com.ubuntu.xenial:def:201789320000000	V	CVE-2017-8932 on Ubuntu 16.04 LTS (xenial) - low.	2017-07-06
oval:com.ubuntu.bionic:def:20178932000	V	CVE-2017-8932 on Ubuntu 18.04 LTS (bionic) - low.	2017-07-06
oval:com.ubuntu.cosmic:def:20178932000	V	CVE-2017-8932 on Ubuntu 18.10 (cosmic) - low.	2017-07-06

BACK