Medium severity5.9NVD Advisory· Published Jul 6, 2017· Updated May 13, 2026
CVE-2017-8932
CVE-2017-8932
Description
A bug in the standard library ScalarMult implementation of curve P-256 for amd64 architectures in Go before 1.7.6 and 1.8.x before 1.8.2 causes incorrect results to be generated for specific input points. An adaptive attack can be mounted to progressively extract the scalar input to ScalarMult by submitting crafted points and observing failures to the derive correct output. This leads to a full key recovery attack against static ECDH, as used in popular JWT libraries.
Affected products
6- cpe:2.3:a:novell:suse_package_hub_for_suse_linux_enterprise:12:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:25:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
9- lists.opensuse.org/opensuse-updates/2017-06/msg00079.htmlnvdPatchThird Party Advisory
- lists.opensuse.org/opensuse-updates/2017-06/msg00080.htmlnvdPatchThird Party Advisory
- github.com/golang/go/commit/9294fa2749ffee7edbbb817a0ef9fe633136fa9cnvdIssue TrackingPatchThird Party Advisory
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory
- github.com/golang/go/issues/20040nvdThird Party Advisory
- go-review.googlesource.com/c/41070/nvdVendor Advisory
- groups.google.com/d/msg/golang-announce/B5ww0iFt1_Q/TgUFJV14BgAJnvdVendor Advisory
- access.redhat.com/errata/RHSA-2017:1859nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZH4T47ROLZ6YEZBDVXVS2KISTDMXAPS/nvd
News mentions
0No linked articles in our index yet.