{"id":"CVE-2016-9121","published":"2017-03-28T02:46:00Z","modified":"2024-08-06T02:42:10Z","title":"go-jose before 1.0.4 suffers from an invalid curve attack for the ECDH-ES algorithm","vendor":null,"product":null,"tier":"tail","description":{"text":"go-jose before 1.0.4 suffers from an invalid curve attack for the ECDH-ES algorithm. When deriving a shared key using ECDH-ES for an encrypted message, go-jose neglected to check that the received public key on a message is on the same curve as the static private key of the receiver, thus making it vulnerable to an invalid curve attack.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.01411,"percentile":0.7261,"provenance":"source"},"cwes":[],"references":[{"url":"https://github.com/square/go-jose/commit/c7581939a3656bb65e89d64da0a52364a33d2507","tags":["x_refsource_MISC"]},{"url":"https://hackerone.com/reports/164590","tags":["x_refsource_MISC"]},{"url":"http://www.openwall.com/lists/oss-security/2016/11/03/1","tags":["x_refsource_MISC"]}],"priority":{"score":14.5,"factors":[{"name":"EPSS percentile","points":14.52}]},"affectedVersions":[{"vendor":"n/a","product":"Go JOSE All versions before 1.0.4","versions":["Go JOSE All versions before 1.0.4"]}],"affected":[{"ecosystem":"Go","package":"gopkg.in/square/go-jose.v1","vulnerableRanges":["<1.0.4"],"patched":["1.0.4"],"from":["GHSA-86r9-39j9-99wp"],"provenance":"source"},{"ecosystem":"Go","package":"github.com/square/go-jose","vulnerableRanges":["<1.0.4"],"patched":["1.0.4"],"from":["GHSA-86r9-39j9-99wp","GO-2020-0010"],"provenance":"source"}],"euvd":{"id":"EUVD-2021-1289","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-gopkg-in-square-go-jose-v1-cve-2016-9121","children":[{"from":"CVE-2016-9121","to":"CVE-2016-9122","relation":"successor","confidence":"high","kind":"lineage","orderedBy":"description","evidence":[{"kind":"version-step","provenance":"source","package":"Go:gopkg.in/square/go-jose.v1","fromFixed":"1.0.4","toFixed":"1.1.0","daysApart":0},{"kind":"same-code","provenance":"machine","files":["cipher/ecdh_es.go"],"commits":["https://github.com/square/go-jose/commit/c7581939a3656bb65e89d64da0a52364a33d2507","https://github.com/square/go-jose/commit/2c5656adca9909843c4ff50acf1d2cf8f32da7e6","https://github.com/square/go-jose/commit/789a4c4bd4c118f7564954f441b29c153ccd6a96"],"basis":"rarely changed file"},{"kind":"similar","provenance":"machine","score":0.21,"basis":"same package + description similarity"}]},{"from":"CVE-2016-9121","to":"CVE-2016-9123","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["cipher/ecdh_es.go"],"commits":["https://github.com/square/go-jose/commit/c7581939a3656bb65e89d64da0a52364a33d2507","https://github.com/square/go-jose/commit/789a4c4bd4c118f7564954f441b29c153ccd6a96"],"basis":"rarely changed file"}]}],"packageHistory":[{"cve":"CVE-2016-9121","published":"2017-03-28","fixed":"1.0.4","kev":false},{"cve":"CVE-2016-9122","published":"2017-03-28","fixed":"1.1.0","kev":false}],"package":"Go:gopkg.in/square/go-jose.v1"}}