CVE-2021-3114
—CVSS 3.1
6.5 medium
EPSS
3%p85
Published
()
Modified
Description
In Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect outputs, related to an underflow of the lowest limb during the final complete reduction in the P-224 field.
- Vendors
- golangfedoraprojectdebiannetapp
- Products
- go, fedora, debian linux, cloud insights telegraf agent, storagegrid
- Weakness
- CWE-682
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
In the news0 stories
No ingested article mentions this CVE yet.