CVE-2015-8618
high
CVSS v3
7.5
CVSS v2
5.0
VIR risk
7.5
Description
Incorrect calculation affecting RSA computations in math/big
Predictions
Exploit likelihood
83%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: cve@mitre.org — https://github.com/golang/go/issues/13515
OS impact
| OS | Version | Status | Fixed in |
|---|---|---|---|
| suse | 42.1 | affected | |
Package impact
| Ecosystem | Package | Vulnerable | Fixed |
|---|---|---|---|
| Go | stdlib | >=1.5.0-0,<1.5.3 | 1.5.3 |
References
- http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175642.html
- http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176179.html
- http://lists.opensuse.org/opensuse-updates/2016-05/msg00077.html
- http://www.openwall.com/lists/oss-security/2015/12/21/6
- http://www.openwall.com/lists/oss-security/2015/12/22/9
- http://www.openwall.com/lists/oss-security/2016/01/13/7
- https://github.com/golang/go/issues/13515
- https://go-review.googlesource.com/#/c/17672/
- https://groups.google.com/forum/#%21topic/golang-announce/MEATuOi_ei4
- https://go.dev/cl/18491
- https://go.googlesource.com/go/+/1e066cad1ba23f4064545355b8737e4762dd6838
- https://go.googlesource.com/go/+/4306352182bf94f86f0cfc6a8b0ed461cbf1d82c
- https://go.dev/cl/17672
- https://go.dev/issue/13515
- https://groups.google.com/g/golang-announce/c/MEATuOi_ei4
CWEs
CWE-200
Verify integrity in audit chain (admin only). AS-IS.