P-256 Feature Vulnerability in Go Crypto Library
CVE-2022-28327
7.5HIGH
What is CVE-2022-28327?
A vulnerability in the P-256 implementation of the Go crypto library allows attackers to exploit the system by feeding excessively long scalar inputs, which can lead to a panic. This flaw affects versions of Go before 1.17.9 and 1.18.x prior to 1.18.1, creating potential risks for applications utilizing this cryptographic functionality. Developers are urged to update to the latest versions to mitigate this issue.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
References
CVSS V3.1
Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved