critical
CVE-2022-23806
golang: crypto/elliptic: IsOnCurve returns true for invalid field elements
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.
Severity by source
NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Red Hat7.1CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
Bitnami9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Trivy's own label is CRITICAL. Rated critical by NVD, Azure Linux, Bitnami, CBL-Mariner, Photon OS. Rated lower by Amazon (high), Red Hat (medium), AlmaLinux (medium), Oracle (medium).
Description
Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly return true in situations with a big.Int value that is not a valid field element.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| Azure Linux 3.0 | python-tensorboard | 0:2.16.2-2.azl3 |
| bitnami::Bitnami Vulnerability Database | golang | 1.16.14, 1.17.7 |
| CBL-Mariner 2.0 | golang | 0:1.18.8-3.cm2 |
| Photon OS 1.0 | go | 1.17.2-1.ph1 |
| Photon OS 2.0 | go | 1.17.2-3.ph2 |
| Photon OS 3.0 | go | 1.17.2-4.ph3 |
| Photon OS 4.0 | go, kubernetes-dashboard | 1.17.2-3.ph4 and 1 more |
| alma 8 | go-toolset:rhel8::delve, go-toolset:rhel8::go-toolset, go-toolset:rhel8::golang and 6 more | 1.7.2-1.module_el8.6.0+2736+ec10aba8 and 1 more |
| alpine 3.14 | go | 1.16.15-r0 |
| alpine 3.15 | go | 1.17.9-r0 |
| alpine 3.16 | go | 1.17.7-r0 |
| alpine 3.17 | go | 1.17.7-r0 |
Show all 114 entries from 38 sources
| Source | Package | Fixed in |
|---|---|---|
| Azure Linux 3.0 | python-tensorboard | 0:2.16.2-2.azl3 |
| bitnami::Bitnami Vulnerability Database | golang | 1.16.14, 1.17.7 |
| CBL-Mariner 2.0 | golang | 0:1.18.8-3.cm2 |
| Photon OS 1.0 | go | 1.17.2-1.ph1 |
| Photon OS 2.0 | go | 1.17.2-3.ph2 |
| Photon OS 3.0 | go | 1.17.2-4.ph3 |
| Photon OS 4.0 | go | 1.17.2-3.ph4 |
| Photon OS 4.0 | kubernetes-dashboard | 2.7.0-1.ph4 |
| alma 8 | go-toolset:rhel8::delve | 1.7.2-1.module_el8.6.0+2736+ec10aba8 |
| alma 8 | go-toolset:rhel8::go-toolset | 1.17.7-1.module_el8.6.0+2736+ec10aba8 |
| alma 8 | go-toolset:rhel8::golang | 1.17.7-1.module_el8.6.0+2736+ec10aba8 |
| alma 8 | go-toolset:rhel8::golang-bin | 1.17.7-1.module_el8.6.0+2736+ec10aba8 |
| alma 8 | go-toolset:rhel8::golang-docs | 1.17.7-1.module_el8.6.0+2736+ec10aba8 |
| alma 8 | go-toolset:rhel8::golang-misc | 1.17.7-1.module_el8.6.0+2736+ec10aba8 |
| alma 8 | go-toolset:rhel8::golang-race | 1.17.7-1.module_el8.6.0+2736+ec10aba8 |
| alma 8 | go-toolset:rhel8::golang-src | 1.17.7-1.module_el8.6.0+2736+ec10aba8 |
| alma 8 | go-toolset:rhel8::golang-tests | 1.17.7-1.module_el8.6.0+2736+ec10aba8 |
| alpine 3.14 | go | 1.16.15-r0 |
| alpine 3.15 | go | 1.17.9-r0 |
| alpine 3.16 | go | 1.17.7-r0 |
| alpine 3.17 | go | 1.17.7-r0 |
| alpine 3.18 | go | 1.17.7-r0 |
| alpine 3.19 | go | 1.17.7-r0 |
| alpine 3.20 | go | 1.17.7-r0 |
| alpine 3.21 | go | 1.17.7-r0 |
| alpine 3.22 | go | 1.17.7-r0 |
| alpine 3.23 | go | 1.17.7-r0 |
| alpine 3.24 | go | 1.17.7-r0 |
| alpine edge | go | 1.17.7-r0 |
| amazon linux 1 | golang | 1.16.15-1.38.amzn1 |
| amazon linux 1 | golang-bin | 1.16.15-1.38.amzn1 |
| amazon linux 1 | golang-docs | 1.16.15-1.38.amzn1 |
| amazon linux 1 | golang-misc | 1.16.15-1.38.amzn1 |
| amazon linux 1 | golang-race | 1.16.15-1.38.amzn1 |
| amazon linux 1 | golang-shared | 1.16.15-1.38.amzn1 |
| amazon linux 1 | golang-src | 1.16.15-1.38.amzn1 |
| amazon linux 1 | golang-tests | 1.16.15-1.38.amzn1 |
| amazon linux 2 | golang | 1.16.15-1.amzn2.0.1 |
| amazon linux 2 | golang-bin | 1.16.15-1.amzn2.0.1 |
| amazon linux 2 | golang-docs | 1.16.15-1.amzn2.0.1 |
| amazon linux 2 | golang-misc | 1.16.15-1.amzn2.0.1 |
| amazon linux 2 | golang-race | 1.16.15-1.amzn2.0.1 |
| amazon linux 2 | golang-shared | 1.16.15-1.amzn2.0.1 |
| amazon linux 2 | golang-src | 1.16.15-1.amzn2.0.1 |
| amazon linux 2 | golang-tests | 1.16.15-1.amzn2.0.1 |
| amazon linux 2023 | golang | 1.19.8-1.amzn2023.0.1 |
| amazon linux 2023 | golang-bin | 1.19.8-1.amzn2023.0.1 |
| amazon linux 2023 | golang-docs | 1.19.8-1.amzn2023.0.1 |
| amazon linux 2023 | golang-misc | 1.19.8-1.amzn2023.0.1 |
| amazon linux 2023 | golang-race | 1.19.8-1.amzn2023.0.1 |
| amazon linux 2023 | golang-shared | 1.19.8-1.amzn2023.0.1 |
| amazon linux 2023 | golang-src | 1.19.8-1.amzn2023.0.1 |
| amazon linux 2023 | golang-tests | 1.19.8-1.amzn2023.0.1 |
| debian 10 | golang-1.11 | 1.11.6-1+deb10u6 |
| debian 11 | golang-1.15 | 1.15.15-1~deb11u3 |
| debian 9 | golang-1.7 | 1.7.4-2+deb9u5 |
| debian 9 | golang-1.8 | 1.8.1-1+deb9u5 |
| go::The Go Vulnerability Database | stdlib | 1.16.14, 1.17.7 |
| Oracle Linux 8 | delve | 1.7.2-1.0.1.module+el8.6.0+20559+3b94dc2a |
| Oracle Linux 8 | go-toolset | 1.17.7-1.module+el8.6.0+20559+3b94dc2a |
| Oracle Linux 8 | golang | 1.17.7-1.module+el8.6.0+20559+3b94dc2a |
| Oracle Linux 8 | golang-bin | 1.17.7-1.module+el8.6.0+20559+3b94dc2a |
| Oracle Linux 8 | golang-docs | 1.17.7-1.module+el8.6.0+20559+3b94dc2a |
| Oracle Linux 8 | golang-misc | 1.17.7-1.module+el8.6.0+20559+3b94dc2a |
| Oracle Linux 8 | golang-race | 1.17.7-1.module+el8.6.0+20559+3b94dc2a |
| Oracle Linux 8 | golang-src | 1.17.7-1.module+el8.6.0+20559+3b94dc2a |
| Oracle Linux 8 | golang-tests | 1.17.7-1.module+el8.6.0+20559+3b94dc2a |
| rapidfort alma 9 | git-lfs | no fix listed |
| rapidfort amazon linux 2023 | golang | 1.19.8-1.amzn2023.0.1 |
| rapidfort amazon linux 2023 | golang-bin | 1.19.8-1.amzn2023.0.1 |
| rapidfort amazon linux 2023 | golang-docs | 1.19.8-1.amzn2023.0.1 |
| rapidfort amazon linux 2023 | golang-misc | 1.19.8-1.amzn2023.0.1 |
| rapidfort amazon linux 2023 | golang-race | 1.19.8-1.amzn2023.0.1 |
| rapidfort amazon linux 2023 | golang-shared | 1.19.8-1.amzn2023.0.1 |
| rapidfort amazon linux 2023 | golang-src | 1.19.8-1.amzn2023.0.1 |
| rapidfort amazon linux 2023 | golang-tests | 1.19.8-1.amzn2023.0.1 |
| rapidfort Oracle Linux 9 | git-lfs | no fix listed |
| rapidfort rocky | rf-git-lfs | 3.7.1-14.rf |
| rapidfort rocky 9 | git-lfs | no fix listed |
| rapidfort ubuntu 20.04 | snapd | 0:2.62+24.04build1 |
| rapidfort ubuntu 22.04 | snapd | 0:2.62+24.04build1 |
| rapidfort ubuntu 24.04 | snapd | 0:2.62+24.04build1 |
| Red Hat | etcd | no fix listed |
| Red Hat | git-lfs | no fix listed |
| Red Hat | go-toolset | no fix listed |
| Red Hat | golang | no fix listed |
| Red Hat | golang-bin | no fix listed |
| Red Hat | golang-docs | no fix listed |
| Red Hat | golang-github-streadway-amqp-devel | no fix listed |
| Red Hat | golang-misc | no fix listed |
| Red Hat | golang-qpid-apache | no fix listed |
| Red Hat | golang-race | no fix listed |
| Red Hat | golang-src | no fix listed |
| Red Hat | golang-tests | no fix listed |
| Red Hat | servicemesh-grafana | no fix listed |
| Red Hat | servicemesh-grafana-prometheus | no fix listed |
| Red Hat | servicemesh-proxy | no fix listed |
| rocky 8 | go-toolset | 1.17.7-1.module+el8.6.0+824+8e984c20 |
| rocky 8 | go-toolset:rhel8::delve | 1.7.2-1.module+el8.6.0+824+8e984c20 |
| rocky 8 | go-toolset:rhel8::go-toolset | 1.17.7-1.module+el8.6.0+824+8e984c20 |
| rocky 8 | go-toolset:rhel8::golang | 1.17.7-1.module+el8.6.0+824+8e984c20 |
| rocky 8 | go-toolset:rhel8::golang-bin | 1.17.7-1.module+el8.6.0+824+8e984c20 |
| rocky 8 | go-toolset:rhel8::golang-docs | 1.17.7-1.module+el8.6.0+824+8e984c20 |
| rocky 8 | go-toolset:rhel8::golang-misc | 1.17.7-1.module+el8.6.0+824+8e984c20 |
| rocky 8 | go-toolset:rhel8::golang-race | 1.17.7-1.module+el8.6.0+824+8e984c20 |
| rocky 8 | go-toolset:rhel8::golang-src | 1.17.7-1.module+el8.6.0+824+8e984c20 |
| rocky 8 | go-toolset:rhel8::golang-tests | 1.17.7-1.module+el8.6.0+824+8e984c20 |
| rocky 8 | golang | 1.17.7-1.module+el8.6.0+824+8e984c20 |
| rocky 8 | golang-bin | 1.17.7-1.module+el8.6.0+824+8e984c20 |
| rocky 8 | golang-docs | 1.17.7-1.module+el8.6.0+824+8e984c20 |
| rocky 8 | golang-misc | 1.17.7-1.module+el8.6.0+824+8e984c20 |
| rocky 8 | golang-race | 1.17.7-1.module+el8.6.0+824+8e984c20 |
| rocky 8 | golang-src | 1.17.7-1.module+el8.6.0+824+8e984c20 |
| rocky 8 | golang-tests | 1.17.7-1.module+el8.6.0+824+8e984c20 |
References
- https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-38297.json
- https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-39293.json
- https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-41771.json
- https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-41772.json
- https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-23772.json
- https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-23773.json
- https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-23806.json
- https://access.redhat.com/security/cve/CVE-2022-23806
All 24 references
- https://errata.almalinux.org/8/ALSA-2022-1819.html
- https://go.dev/cl/382455
- https://go.dev/issue/50974
- https://go.googlesource.com/go/+/7f9494c277a471f6f47f4af3036285c0b1419816
- https://groups.google.com/g/golang-announce/c/SUsQn0aSgPQ
- https://linux.oracle.com/cve/CVE-2022-23806.html
- https://linux.oracle.com/errata/ELSA-2022-1819.html
- https://lists.debian.org/debian-lts-announce/2022/04/msg00017.html
- https://lists.debian.org/debian-lts-announce/2022/04/msg00018.html
- https://lists.debian.org/debian-lts-announce/2023/04/msg00021.html
- https://nvd.nist.gov/vuln/detail/CVE-2022-23806
- https://pkg.go.dev/vuln/GO-2021-0319
- https://security.gentoo.org/glsa/202208-02
- https://security.netapp.com/advisory/ntap-20220225-0006/
- https://www.cve.org/CVERecord?id=CVE-2022-23806
- https://www.oracle.com/security-alerts/cpujul2022.html