CVE-2021-3114 vulnerability in GoLang and Other Products
Published on January 26, 2021
In Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect outputs, related to an underflow of the lowest limb during the final complete reduction in the P-224 field.
Products Associated with CVE-2021-3114
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2021-3114 are published in these products:
Exploit Probability
EPSS
0.04%
Percentile
10.02%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.