475 matches found
nettle: Out of bounds memory access in signature verification
A flaw was found in Nettle, where several Nettle signature verification functions GOST DSA, EDDSA & ECDSA result in the Elliptic Curve Cryptography point ECC multiply function being called with out-of-range scalers, possibly resulting in incorrect results. This flaw allows an attacker to force an...
[ASA-202106-28] nettle: denial of service
Arch Linux Security Advisory ASA-202106-28 ========================================== Severity: Medium Date : 2021-06-09 CVE-ID : CVE-2021-3580 Package : nettle Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-2052 Summary ======= The package nettle before version...
RHEL 7 : nettle (RHSA-2021:2356)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2356 advisory. Nettle is a cryptographic library that is designed to fit easily in almost any context: In crypto toolkits for object-oriented languages, such as C++...
CVE-2021-3580
A flaw was found in nettle in the way its RSA decryption functions handle specially crafted ciphertext. This flaw allows an attacker to provide a manipulated ciphertext, leading to an application crash and a denial of service. Mitigation As per upstream: For applications that want to support olde...
RHEL 7 : nettle (RHSA-2021:2280)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2280 advisory. Nettle is a cryptographic library that is designed to fit easily in almost any context: In crypto toolkits for object-oriented languages, such as C++...
nettle: Out of bounds memory access in signature verification
A flaw was found in Nettle, where several Nettle signature verification functions GOST DSA, EDDSA & ECDSA result in the Elliptic Curve Cryptography point ECC multiply function being called with out-of-range scalers, possibly resulting in incorrect results. This flaw allows an attacker to force an...
Important: Red Hat Security Advisory: nettle security update
An update for nettle is now available for Red Hat Enterprise Linux 7.7 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
Linux Nettle 输入验证错误漏洞
Linux Nettle is an American open source application for Linux. Contains a design that lends itself easily to a low-level cryptographic library in many cases. An input validation error vulnerability exists in Linux Nettle, which stems from the way the RSA decryption function improperly handles...
The vulnerability of signature verification functions (GOST DSA, EDDSA, and ECDSA) in the Nettle library, due to deficiencies in the cryptographic algorithms used, allows a perpetrator who has not undergone authentication verification to execute arbitrary code.
The vulnerability of signature verification functions GOST DSA, EDDSA, and ECDSA in the Nettle library is related to the shortcomings of the cryptographic algorithms used. Exploiting this vulnerability could allow an attacker to execute arbitrary code by submitting invalid signatures...
Nettle: Denial of service
Background Nettle is a cryptographic library that is designed to fit easily in almost any context: In cryptographic toolkits for object-oriented languages, such as C++, Python, or Pike, in applications like lsh or GnuPG, or even in kernel space. Description It was discovered that Nettle incorrect...
PT-2021-5781 · Nettle +9 · Nettle +9
Name of the Vulnerable Software and Affected Versions: Nettle affected versions not specified Description: A flaw was found in the way Nettle's RSA decryption functions handled specially crafted ciphertext. An attacker could use this flaw to provide a manipulated ciphertext leading to application...
CVE-2021-20305 affecting package nettle 3.4.1-2
CVE-2021-20305 affecting package nettle 3.4.1-2. An upgraded version of the package is available that resolves this issue...
USN-4906-1: Nettle vulnerability | Cloud Foundry
Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Description It was discovered that Nettle incorrectly handled signature verification. A remote attacker could use this issue to cause Nettle to crash, resulting in a denial of service, or...
Amazon Linux 2 : nettle (ALAS-2021-1629)
The version of nettle installed on the remote host is prior to 2.7.1-9. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2021-1629 advisory. A flaw was found in Nettle, where several Nettle signature verification functions GOST DSA, EDDSA & ECDSA result in the Elliptic Cur...
Photon OS 3.0: Nettle PHSA-2021-3.0-0223
An update of the nettle package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0223. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid148907;...
Photon OS 1.0: Nettle PHSA-2021-1.0-0383
An update of the nettle package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-1.0-0383. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid14890...
Photon OS 2.0: Nettle PHSA-2021-2.0-0339
An update of the nettle package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0339. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid14890...
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2021-1.0-0383
An update of 'nettle', 'rpm' packages of Photon OS has been released...