CVE-2021-3114
26.01.2021, 18:16
In Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect outputs, related to an underflow of the lowest limb during the final complete reduction in the P-224 field.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| golang | go | 𝑥 < 1.14.14 |
| golang | go | 1.15 ≤ 𝑥 < 1.15.7 |
| debian | debian_linux | 9.0 |
| debian | debian_linux | 10.0 |
| netapp | cloud_insights_telegraf_agent | - |
| netapp | storagegrid | - |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| golang |
| ||||||||||||||||||||||||
| golang-1.10 |
| ||||||||||||||||||||||||
| golang-1.13 |
| ||||||||||||||||||||||||
| golang-1.14 |
| ||||||||||||||||||||||||
| golang-1.15 |
| ||||||||||||||||||||||||
| golang-1.6 |
| ||||||||||||||||||||||||
| golang-1.8 |
| ||||||||||||||||||||||||
| golang-1.9 |
|
Amazon Linux Releases
Amazon Package | |||
|---|---|---|---|
| golang |
| ||
| golang-bin |
| ||
| golang-docs |
| ||
| golang-misc |
| ||
| golang-race |
| ||
| golang-src |
| ||
| golang-tests |
|
Azure Linux Releases
Common Weakness Enumeration
References