CVE-2016-9123

go-jose before 1.0.5 suffers from a CBC-HMAC integer overflow on 32-bit architectures

published March 28, 2017

CVSS
—
EPSS
2%
Percentile
81.9
In the wild
Unconfirmed
What it is

go-jose before 1.0.5 suffers from a CBC-HMAC integer overflow on 32-bit architectures. An integer overflow could lead to authentication bypass for CBC-HMAC encrypted ciphertexts on 32-bit architectures.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02149 · 81.9th percentile
Published
2017-03-28T02:46Z
EPSS history
Timeline
  • 28 MAR 02:46Z
    go-jose before 1.0.5 suffers from a CBC-HMAC integer overflow on 32-bit architectures
    cvelistv5