Bug 2053429 (CVE-2022-23806) - CVE-2022-23806 golang: crypto/elliptic: IsOnCurve returns true for invalid field elements
Summary: CVE-2022-23806 golang: crypto/elliptic: IsOnCurve returns true for invalid fi...
Keywords:
Status: CLOSED ERRATA
Alias: CVE-2022-23806
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 2063937 2063939 2068803 2073715 2073716 2080403 2080405 2053432 2053433 2054628 2054668 2054845 2056095 2056098 2056102 2056513 2056514 2057118 2057120 2058179 2058180 2058181 2058182 2058183 2058184 2066428 2067552 2068603 2068662 2068663 2068664 2068670 2068671 2068673 2068827 2068828 2068829 2068836 2080392 2080393 2080394 2080395 2080396 2080397 2080398 2080399 2080400 2080401 2080402 2080404 2080406 2093366 2093367 2093369 2093370
Blocks: 2053423 2053545
TreeView+ depends on / blocked
 
Reported: 2022-02-11 09:51 UTC by Vipul Nair
Modified: 2022-10-24 08:51 UTC (History)
175 users (show)

Fixed In Version: go 1.17.7, go 1.16.14
Doc Type: If docs needed, set a value
Doc Text:
A flaw was found in the elliptic package of the crypto library in golang when the IsOnCurve function could return true for invalid field elements. This flaw allows an attacker to take advantage of this undefined behavior, affecting the availability and integrity of the resource.
Clone Of:
Environment:
Last Closed: 2022-05-11 16:15:31 UTC


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2022:1081 0 None None None 2022-03-28 14:16:00 UTC
Red Hat Product Errata RHSA-2022:1819 0 None None None 2022-05-10 13:39:03 UTC
Red Hat Product Errata RHSA-2022:4860 0 None None None 2022-06-01 11:46:23 UTC
Red Hat Product Errata RHSA-2022:4863 0 None None None 2022-06-01 13:59:34 UTC
Red Hat Product Errata RHSA-2022:4956 0 None None None 2022-06-09 02:06:33 UTC
Red Hat Product Errata RHSA-2022:5004 0 None None None 2022-06-13 12:33:21 UTC
Red Hat Product Errata RHSA-2022:5006 0 None None None 2022-06-13 12:44:11 UTC
Red Hat Product Errata RHSA-2022:5068 0 None None None 2022-08-10 10:08:37 UTC
Red Hat Product Errata RHSA-2022:5201 0 None None None 2022-06-27 17:03:41 UTC
Red Hat Product Errata RHSA-2022:5392 0 None None None 2022-06-28 17:06:05 UTC
Red Hat Product Errata RHSA-2022:5875 0 None None None 2022-08-09 02:35:50 UTC
Red Hat Product Errata RHSA-2022:6094 0 None None None 2022-08-23 18:12:02 UTC
Red Hat Product Errata RHSA-2022:6156 0 None None None 2022-08-24 13:46:53 UTC
Red Hat Product Errata RHSA-2022:6526 0 None None None 2022-09-14 19:27:34 UTC

Description Vipul Nair 2022-02-11 09:51:02 UTC
Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly return true in situations with a big.Int value that is not a valid field element.

https://groups.google.com/g/golang-announce/c/SUsQn0aSgPQ

Comment 1 Vipul Nair 2022-02-11 09:56:38 UTC
Created golang tracking bugs for this issue:

Affects: epel-all [bug 2053432]
Affects: fedora-all [bug 2053433]

Comment 17 errata-xmlrpc 2022-03-28 14:15:52 UTC
This issue has been addressed in the following products:

  Red Hat Advanced Cluster Management for Kubernetes 2.3 for RHEL 8

Via RHSA-2022:1081 https://access.redhat.com/errata/RHSA-2022:1081

Comment 24 errata-xmlrpc 2022-05-10 13:38:54 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2022:1819 https://access.redhat.com/errata/RHSA-2022:1819

Comment 25 Product Security DevOps Team 2022-05-11 16:15:25 UTC
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s):

https://access.redhat.com/security/cve/cve-2022-23806

Comment 26 errata-xmlrpc 2022-06-01 11:46:17 UTC
This issue has been addressed in the following products:

  Openshift Serverless 1 on RHEL 8

Via RHSA-2022:4860 https://access.redhat.com/errata/RHSA-2022:4860

Comment 27 errata-xmlrpc 2022-06-01 13:59:28 UTC
This issue has been addressed in the following products:

  Openshift Serveless 1.22

Via RHSA-2022:4863 https://access.redhat.com/errata/RHSA-2022:4863

Comment 28 errata-xmlrpc 2022-06-09 02:06:27 UTC
This issue has been addressed in the following products:

  Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8

Via RHSA-2022:4956 https://access.redhat.com/errata/RHSA-2022:4956

Comment 29 errata-xmlrpc 2022-06-13 12:33:15 UTC
This issue has been addressed in the following products:

  OpenShift Service Mesh 2.1

Via RHSA-2022:5004 https://access.redhat.com/errata/RHSA-2022:5004

Comment 30 errata-xmlrpc 2022-06-13 12:44:03 UTC
This issue has been addressed in the following products:

  OpenShift Service Mesh 2.1

Via RHSA-2022:5006 https://access.redhat.com/errata/RHSA-2022:5006

Comment 31 errata-xmlrpc 2022-06-27 17:03:32 UTC
This issue has been addressed in the following products:

  Red Hat Advanced Cluster Management for Kubernetes 2.4 for RHEL 8

Via RHSA-2022:5201 https://access.redhat.com/errata/RHSA-2022:5201

Comment 32 errata-xmlrpc 2022-06-28 17:06:00 UTC
This issue has been addressed in the following products:

  Red Hat Advanced Cluster Management for Kubernetes 2.3 for RHEL 8
  Red Hat Advanced Cluster Management for Kubernetes 2.3 for RHEL 7

Via RHSA-2022:5392 https://access.redhat.com/errata/RHSA-2022:5392

Comment 33 errata-xmlrpc 2022-08-09 02:35:42 UTC
This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.10

Via RHSA-2022:5875 https://access.redhat.com/errata/RHSA-2022:5875

Comment 34 errata-xmlrpc 2022-08-10 10:08:30 UTC
This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.11
  Ironic content for Red Hat OpenShift Container Platform 4.11

Via RHSA-2022:5068 https://access.redhat.com/errata/RHSA-2022:5068

Comment 37 errata-xmlrpc 2022-08-23 18:11:55 UTC
This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.10

Via RHSA-2022:6094 https://access.redhat.com/errata/RHSA-2022:6094

Comment 38 errata-xmlrpc 2022-08-24 13:46:46 UTC
This issue has been addressed in the following products:

  Red Hat OpenShift Data Foundation 4.11 on RHEL8

Via RHSA-2022:6156 https://access.redhat.com/errata/RHSA-2022:6156

Comment 39 errata-xmlrpc 2022-09-14 19:27:29 UTC
This issue has been addressed in the following products:

  RHEL-8-CNV-4.11

Via RHSA-2022:6526 https://access.redhat.com/errata/RHSA-2022:6526


Note You need to log in before you can comment on or make changes to this bug.