Lucene search
K

17 matches found

Tenable Nessus
Tenable Nessus
added 2026/05/22 12:0 a.m.3 views

Unity Linux 20.1060e / 20.1070e Security Update: nettle (UTSA-2026-016652)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016652 advisory. A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An attacker could use this flaw to provide a manipulated cipherte...

7.5CVSS6.7AI score0.00104EPSS
Exploits0References4
AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.1 views

Astra Linux - уязвимость в nettle

A flaw was discovered in the way Nettle’s RSA decryption functions handled specially crafted ciphertext. An attacker could exploit this flaw to deliver manipulated ciphertext, resulting in application crashes and denial of service...

7.5CVSS6.7AI score0.00104EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/04/23 4:30 a.m.1 views

CVE-2026-41989

Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcrypkdecrypt...

6.7CVSS6AI score0.00007EPSS
Exploits0References4Affected Software1
Snyk
Snyk
added 2026/02/12 1:55 p.m.1 views

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the pgppubdecryptbytea, which missing a safeguard for the session key length read from the message data, that can be given in input of pgppubdecryptbytea. An attacker can execute arbitrary code as the...

8.8CVSS6.2AI score0.00039EPSS
Exploits3References2
Tenable Nessus
Tenable Nessus
added 2025/11/13 12:0 a.m.2 views

Siemens SIMATIC S7-1500 Improper Input Validation (CVE-2021-3580)

A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An attacker could use this flaw to provide a manipulated ciphertext leading to application crash and denial of service. This plugin only works with Tenable.ot. Please visit...

7.5CVSS6.6AI score0.00104EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 3:49 a.m.2 views

SUSE CVE-2021-3580

A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An attacker could use this flaw to provide a manipulated ciphertext leading to application crash and denial of service...

7.5CVSS6.3AI score0.00104EPSS
Exploits0References74
OSV
OSV
added 2021/08/20 11:3 a.m.1 views

OESA-2021-1320 nettle security update

Nettle is a cryptographic library designed to fit any context in crypto toolkits for object-oriented languages, in applications like LSH or GnuPG, or even in kernel space. Security Fixes: A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An attack...

7.5CVSS6.6AI score0.00104EPSS
Exploits0References2
Microsoft CVE
Microsoft CVE
added 2021/08/14 7:0 a.m.2 views

A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An attacker could use this flaw to provide a manipulated ciphertext leading to application crash and denial of service.

...

7.5CVSS6.5AI score0.00104EPSS
Exploits0
OSV
OSV
added 2021/08/05 9:15 p.m.2 views

AZL-6741 CVE-2021-3580 affecting package nettle for versions less than 3.7.3-1

A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An attacker could use this flaw to provide a manipulated ciphertext leading to application crash and denial of service...

7.5CVSS6.6AI score0.00104EPSS
Exploits0References1
OSV
OSV
added 2021/08/05 9:15 p.m.0 views

ALPINE-CVE-2021-3580

A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An attacker could use this flaw to provide a manipulated ciphertext leading to application crash and denial of service...

7.5CVSS6.5AI score0.00104EPSS
Exploits0References1
OSV
OSV
added 2021/08/05 9:15 p.m.1 views

DEBIAN-CVE-2021-3580

A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An attacker could use this flaw to provide a manipulated ciphertext leading to application crash and denial of service...

7.5CVSS6.2AI score0.00104EPSS
Exploits0References1
Prion
Prion
added 2021/08/05 9:15 p.m.17 views

Denial of service

A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An attacker could use this flaw to provide a manipulated ciphertext leading to application crash and denial of service...

5CVSS8AI score0.00104EPSS
Exploits0References4Affected Software3
ATTACKERKB
ATTACKERKB
added 2021/08/05 9:15 p.m.0 views

CVE-2021-3580

A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An attacker could use this flaw to provide a manipulated ciphertext leading to application crash and denial of service...

7.5CVSS5.5AI score0.00104EPSS
Exploits0References5
Debian CVE
Debian CVE
added 2021/08/05 12:0 a.m.35 views

CVE-2021-3580

A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An attacker could use this flaw to provide a manipulated ciphertext leading to application crash and denial of service...

7.5CVSS6.1AI score0.00104EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2021/05/17 12:0 a.m.1 views

PT-2021-5781 · Nettle +9 · Nettle +9

Name of the Vulnerable Software and Affected Versions: Nettle affected versions not specified Description: A flaw was found in the way Nettle's RSA decryption functions handled specially crafted ciphertext. An attacker could use this flaw to provide a manipulated ciphertext leading to application...

9.8CVSS6.5AI score0.01195EPSS
Exploits1References85
CNVD
CNVD
added 2018/08/20 12:0 a.m.2 views

Cisco IOS/IOS XE Software Information Disclosure Vulnerability (CNVD-2018-16176)

Cisco IOS Software and IOS XE Software are both operating systems for Cisco network devices. Cisco IOS Software and Cisco IOS XE Software have an information disclosure vulnerability in the implementation of RSA encryption nonces that stems from the program not responding correctly to encryption...

5.9CVSS5.5AI score0.00445EPSS
Exploits0References1
CNVD
CNVD
added 2017/08/31 12:0 a.m.1 views

Arbitrary User Password Reset Vulnerability in sentcms v3.0.170127

SentCMS website management system is a simple and easy-to-use website management system created by Nanchang Tengshu Technology Co. SentCMS v3.0.170127 has an arbitrary user password reset vulnerability, which occurs because the system fixes the encryption key. An attacker can reset any user's...

7.2AI score
Exploits0
Rows per page
Query Builder