Vulnerabilities in pkg:golang/filippo.io/nistec

PACKAGE
Advisory Identifier: GHSA-f6hc-9g49-xmx7
Share
Advisory Summary

CVE-2023-24533 is a HIGH (CVSS 7.5) nistec has incorrect calculation vulnerability (CWE-682: Incorrect Calculation) affecting Filippo.io/nistec libraries in the Go ecosystem. The issue involves nistec has incorrect calculation in multiplication of unreduced p-256 scalars. Remediation is available by upgrading affected packages to version 0.0.2.

1 Known Advisory Record(s)
Package Vulnerability Intelligence

pkg:golang/filippo.io/nistec

1 Known Advisory Record(s)

Vulnerability advisories affecting package pkg:golang/filippo.io/nistec. Select an advisory below to view technical details or fixes.

Advisory ID CVE / NVD Severity Summary
GHSA-f6hc-9g49-xmx7 CVE-2023-24533 HIGH nistec has Incorrect Calculation in Multiplication of unreduced P-256 scalars

CVE-2023-24533 at a Glance

CVE Identifier CVE-2023-24533
GHSA Identifier GHSA-f6hc-9g49-xmx7
Severity HIGH
CVSS v3.1 Base Score 7.5
CWE Classification CWE-682: Incorrect Calculation
Affected Product Filippo.io/nistec
Package Ecosystem Go
Published Date
Last Updated

Security Impact

CVSS: 7.5

The security impact metrics below are parsed directly from the CVSS v3.1 vector string (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).

Attack Vector Network (AV:N)
Attack Complexity Low (AC:L)
Privileges Required None (PR:N)
User Interaction None (UI:N)
Scope Unchanged (S:U)
Confidentiality None (C:N)
Integrity High (I:H)
Availability None (A:N)

How to Fix CVE-2023-24533

To remediate this vulnerability, upgrade all affected Filippo.io/nistec dependencies to a patched release. Both direct and transitive dependencies should be checked, as frameworks or security libraries may pull in vulnerable versions transitively.

filippo.io/nistec fixed: 0.0.2 
Upgrade filippo.io/nistec to 0.0.2
Verify Direct and Transitive Dependencies

Run the following command in your project directory to verify that all resolved dependencies use the patched release: 

inspect dependencies for filippo.io/nistec

How to Check if You Are Affected

To determine whether your application is affected by CVE-2023-24533, inspect your project dependencies for Filippo.io/nistec:

inspect dependencies for filippo.io/nistec

Analyze the terminal output to locate any version of Filippo.io/nistec in your dependency tree. If any resolved version matches the vulnerable ranges listed in the table below (for example, versions earlier than 0.0.2), your application is affected.

Note: Verify declared build manifests and deployed runtime container environments.

Technical Details

Vulnerability Mechanism & Technical Analysis

This vulnerability is classified under CWE-682: Incorrect Calculation, where the product performs a calculation that generates incorrect or unintended results that are later used in security-critical decisions or resource management. In Filippo.io/nistec, software state validation or input boundaries are circumvented during processing. Review the official source advisory statement below for specific affected components, classes, and reproduction details.

Source Advisory Statement

Multiplication of certain unreduced P-256 scalars produce incorrect results. There are no protocols known at this time that can be attacked due to this. From the fix commit notes: > Unlike the rest of nistec, the P-256 assembly doesn't use complete addition formulas, meaning that p256PointAdd[Affine]Asm won't return the correct value if the two inputs are equal. > > This was (undocumentedly) ignored in the scalar multiplication loops because as long as the input point is not the identity and the scalar is lower than the order of the group, the addition inputs can't be the same. > > As part of the math/big rewrite, we went however from always reducing the scalar to only checking its length, under the incorrect assumption that the scalar multiplication loop didn't require reduction.

CVE-2023-24533 Affected Filippo.io/nistec Versions

1 component(s)
Fixed Versions:
0.0.2
Product / Package Ecosystem Affected Versions Fixed Version
filippo.io/nistec
golang/filippo.io/nistec
Go
< 0.0.2
0.0.2

References

NVD — CVE-2023-24533 NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-24533
Security Fix Commit FIX COMMIT
https://github.com/FiloSottile/nistec/commit/c58aa1223ccf3943513e1e661cebce95af137244
Filippo.io/nistec Source Repository REPOSITORY
https://github.com/FiloSottile/nistec
go.dev/issue/58647 WEB
https://go.dev/issue/58647
pkg.go.dev/vuln/go-2023-1595 WEB
https://pkg.go.dev/vuln/GO-2023-1595

Frequently Asked Questions

What is CVE-2023-24533?
CVE-2023-24533 is a security vulnerability in Filippo.io/nistec involving nistec has Incorrect Calculation in Multiplication of unreduced P-256 scalars under CWE-682: Incorrect Calculation.
Which Filippo.io/nistec versions are affected?
Affected versions include releases prior to 0.0.2 across affected packages: filippo.io/nistec.
What version fixes CVE-2023-24533?
Upgrading to 0.0.2 (or the latest patched release for your respective branch) resolves the vulnerability.
Is filippo.io/nistec affected?
Yes, filippo.io/nistec is affected in releases prior to 0.0.2. Upgrade your dependency to 0.0.2 or later.
What is the CVSS score of CVE-2023-24533?
CVE-2023-24533 has a CVSS v3.1 base score of 7.5 (HIGH) with vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N.
What CWE is associated with CVE-2023-24533?
CVE-2023-24533 is classified under CWE-682: Incorrect Calculation (The product performs a calculation that generates incorrect or unintended results that are later used in security-critical decisions or resource management.).
How can I check Go dependencies for CVE-2023-24533?
Run the dependency tree command: 'inspect dependencies for filippo.io/nistec'. This command lists direct and transitive dependencies in your build configuration so you can verify if a vulnerable version is resolved.
Machine-readable OSV JSON OSV v1.5 Schema
Normalized schema output
View Raw JSON 
{
  "schema_version" : "1.4.0",
  "id" : "GHSA-f6hc-9g49-xmx7",
  "modified" : "2024-05-20T21:48:49Z",
  "published" : "2023-03-01T22:36:36Z",
  "aliases" : [ "CVE-2023-24533" ],
  "summary" : "nistec has Incorrect Calculation in Multiplication of unreduced P-256 scalars",
  "details" : "Multiplication of certain unreduced P-256 scalars produce incorrect results. There are no protocols known at this time that can be attacked due to this.\n\nFrom the fix commit notes:\n\n> Unlike the rest of nistec, the P-256 assembly doesn't use complete addition formulas, meaning that p256PointAdd[Affine]Asm won't return the correct value if the two inputs are equal.\n> \n> This was (undocumentedly) ignored in the scalar multiplication loops because as long as the input point is not the identity and the scalar is lower than the order of the group, the addition inputs can't be the same.\n> \n> As part of the math/big rewrite, we went however from always reducing the scalar to only checking its length, under the incorrect assumption that the scalar multiplication loop didn't require reduction.",
  "severity" : [ {
    "type" : "CVSS_V3",
    "score" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"
  } ],
  "affected" : [ {
    "package" : {
      "ecosystem" : "Go",
      "name" : "filippo.io/nistec"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "0"
      }, {
        "fixed" : "0.0.2"
      } ]
    } ]
  } ],
  "references" : [ {
    "type" : "ADVISORY",
    "url" : "https://nvd.nist.gov/vuln/detail/CVE-2023-24533"
  }, {
    "type" : "WEB",
    "url" : "https://github.com/FiloSottile/nistec/commit/c58aa1223ccf3943513e1e661cebce95af137244"
  }, {
    "type" : "PACKAGE",
    "url" : "https://github.com/FiloSottile/nistec"
  }, {
    "type" : "WEB",
    "url" : "https://go.dev/issue/58647"
  }, {
    "type" : "WEB",
    "url" : "https://pkg.go.dev/vuln/GO-2023-1595"
  } ],
  "database_specific" : {
    "cwe_ids" : [ "CWE-682" ],
    "severity" : "HIGH",
    "github_reviewed" : true,
    "github_reviewed_at" : "2023-03-01T22:36:36Z",
    "nvd_published_at" : "2023-03-08T20:15:00Z"
  }
}