In Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect outputs, related to an underflow of the lowest limb during the final complete reduction in the P-224 field.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
26/01/2021
by Netapp
3 months ago
by Golang
5 months ago
by Netapp
2 years ago
by Fedoraproject
a month ago
by Debian
2 months ago