nettle_project has 3 CVEs on record between 2021 and 2023. The median CVSS is 8.1 (high), with 1 rated critical.
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 8.1
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
Worst active — by depth score
CVE-2023-36660Critical· 9.8The OCB feature in libnettle in Nettle 3.9 before 3.9.1 allows memory corruption.54CVE-2021-20305High· 8.1A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions (GOST DSA, EDDSA & ECDSA) result in the Elliptic Curve Cryptography point (ECC) multiply function being called with out-of-range s…45CVE-2021-3580High· 7.5A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext42
nettle_project vulnerabilities
CVEs affecting nettle_project, newest first. Open any entry for full detail, references, and exploit status.
3 CVEsRSS
CVE-2023-36660Critical· 9.8The OCB feature in libnettle in Nettle 3.9 before 3.9.1 allows memory corruption.
The OCB feature in libnettle in Nettle 3.9 before 3.9.1 allows memory corruption.
CVE-2021-3580High· 7.5A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext
A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An attacker could use this flaw to provide a manipulated ciphertext leading to application crash and denial of service.
CVE-2021-20305High· 8.1A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions (GOST DSA, EDDSA & ECDSA) result in the Elliptic Curve Cryptography point (ECC) multiply function being called with out-of-range s…
A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions (GOST DSA, EDDSA & ECDSA) result in the Elliptic Curve Cryptography point (ECC) multiply function being called with out-of-range s…