GitHub Advisoryadvisory · Go

GHSA-86r9-39j9-99wp Elliptic Curve Key Disclosure in go-jose

CRITICAL Published 2021-06-23 Modified 2021-05-20 Official page ↗
Aliases
CVE-2016-9121
Ecosystem
Go
Packages
gopkg.in/square/go-jose.v1, github.com/square/go-jose
Severity
Critical
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weaknesses
CWE-326
Reviewed
2021-05-20

Affected packages

• Go gopkg.in/square/go-jose.v1: < 1.0.4 → fixed in 1.0.4 • Go github.com/square/go-jose: < 1.0.4 → fixed in 1.0.4

Description

go-jose before 1.0.4 suffers from an invalid curve attack for the ECDH-ES algorithm. When deriving a shared key using ECDH-ES for an encrypted message, go-jose neglected to check that the received public key on a message is on the same curve as the static private key of the receiver, thus making it vulnerable to an invalid curve attack.

Related

Alias · CVE (1)

  • CVE-2016-9121 go-jose before 1.0.4 suffers from an invalid curve attack for the ECDH-ES algorithm. vulnerability

Weakness · CWE (1)

  • CWE-326 Inadequate Encryption Strength weakness

References