id: GO-2023-2380
modules:
    - module: github.com/ecies/go/v2
      versions:
        - fixed: 2.0.8
      vulnerable_at: 2.0.7
      packages:
        - package: github.com/ecies/go/v2
          symbols:
            - PrivateKey.Encapsulate
            - PrivateKey.ECDH
            - PublicKey.Decapsulate
          derived_symbols:
            - Decrypt
            - Encrypt
summary: Private key recovery via invalid curve point in github.com/ecies/go/v2
description: |-
    An attacker may be able to recover private keys due to a bug in the ECDH
    function.

    The library does not check whether the provided public key is on the curve,
    which means that an attacker can create a public key that is not on the curve
    and use it to recover the private key.

    A workaround is to manually check that the public key is valid by calling the
    IsOnCurve function from the secp256k1 libraries.
cves:
    - CVE-2023-49292
ghsas:
    - GHSA-8j98-cjfr-qx3h
references:
    - advisory: https://github.com/ecies/go/security/advisories/GHSA-8j98-cjfr-qx3h
    - fix: https://github.com/ecies/go/commit/c6e775163866d6ea5233eb8ec8530a9122101ebd
    - web: https://github.com/ashutosh1206/Crypton/blob/master/Diffie-Hellman-Key-Exchange/Attack-Invalid-Curve-Point/README.md