CVE-2021-20305High· 8.1▾ TwilightA flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions (GOST DSA, EDDSA & ECDSA) result in the Elliptic Curve Cryptography point (ECC) multiply function being called with out-of-range s…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 44.6 · likelihood 0.3 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 14.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
1.7%
1.7% → 1.7%
A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions (GOST DSA, EDDSA & ECDSA) result in the Elliptic Curve Cryptography point (ECC) multiply function being called with out-of-range scalers, possibly resulting in incorrect results. This flaw allows an attacker to force an invalid signature, causing an assertion failure or possible validation. The highest threat to this vulnerability is to confidentiality, integrity, as well as system availability.
nettle < 3.7.2fedora = 33enterprise_linux = 7.0enterprise_linux = 8.0active_iq_unified_managerontap_select_deploy_administration_utilitydebian_linux = 9.0debian_linux = 10.0Upgrade past the affected range:
nettle 3.7.2Connected by shared product, vendor, weakness, or advisory.
CVE-2021-3580High· 7.5A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext
CVE-2023-36660Critical· 9.8The OCB feature in libnettle in Nettle 3.9 before 3.9.1 allows memory corruption.
CVE-2024-28834Medium· 5.3A flaw was found in GnuTLS
CVE-2022-2097Medium· 5.3AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances
CVE-2022-1434Medium· 5.9The OpenSSL 3.0 implementation of the RC4-MD5 ciphersuite incorrectly uses the AAD data as the MAC key
CVE-2021-32292Critical· 9.8An issue was discovered in json-c from 20200420 (post 0.14 unreleased code) through 0.15-20200726