CVE-2016-9121: Weak Encryption
Published Mar 28, 2017
·Updated
go-jose before 1.0.4 suffers from an invalid curve attack for the ECDH-ES algorithm. When deriving a shared key using ECDH-ES for an encrypted message, go-jose neglected to check that the received public key on a message is on the same curve as the static private key of the receiver, thus making it vulnerable to an invalid curve attack.
Affected Software
1 affected component
Go-jose Project Go-jose<=1.0.3
Remediation
Patch Available
Event History
Mar 28, 2017
CVE Published
via MITRE·02:46 AM
Data Sourced
via MITRE·02:46 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2016-9121?
CVE-2016-9121 is classified as a medium severity vulnerability.
2
How do I fix CVE-2016-9121?
To fix CVE-2016-9121, upgrade go-jose to version 1.0.4 or later.
3
What vulnerability is associated with CVE-2016-9121?
CVE-2016-9121 is associated with an invalid curve attack on the ECDH-ES algorithm.
4
Who is affected by CVE-2016-9121?
Users of go-jose versions prior to 1.0.4 are affected by CVE-2016-9121.
5
What mitigation strategies should I employ for CVE-2016-9121?
The primary mitigation for CVE-2016-9121 is to update the go-jose library to the latest secure version.