PT-2017-9960 · Go · Go-Jose

Quan Nguyen · Published 2017-03-28 · Updated 2021-06-23 · CVE-2016-9123

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions go-jose versions prior to 1.0.5

Description The issue concerns an integer overflow in CBC-HMAC on 32-bit architectures, potentially leading to authentication bypass for CBC-HMAC encrypted ciphertexts. On 32-bit platforms, an attacker can manipulate ciphertext encrypted with AES-CBC with HMAC, allowing control over the input buffer size when computing the HMAC authentication tag. This could enable a manipulated ciphertext to be verified as authentic, making it vulnerable to padding oracle attacks.

Recommendations For go-jose versions prior to 1.0.5, update to version 1.0.5 or later to resolve the issue. As a temporary workaround, consider restricting the use of CBC-HMAC encryption on 32-bit architectures until the update is applied.

Fix

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2016-9123

GHSA-3FX4-7F69-5MMG

GO-2020-0009

Affected Products

Go-Jose

References · 11

• https://github.com/square/go-jose/commit/789a4c4bd4c118f7564954f441b29c153ccd6a96 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2016-9123 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2016-9123 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2020-0009 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-3fx4-7f69-5mmg · Vendor Advisory
• http://openwall.com/lists/oss-security/2016/11/03/1 · Patch
• https://osv.dev/vulnerability/CVE-2016-9123 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-9123 · Vendor Advisory
• https://openwall.com/lists/oss-security/2016/11/03/1 · Note
• https://hackerone.com/reports/165170 · Note
• https://pkg.go.dev/vuln/GO-2020-0009 · Note