2 matches found
CVE-2015-8804: Undefined Security Weakness
x8664/ecc-384-modp.asm in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-384 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors...
9.8CVSS7.8AI score0.03947EPSS
SaveExploits0References3
PT-2015-3201
Name of the Vulnerable Software and Affected Versions Nettle versions prior to 3.2 Description The issue is related to the x86 64/ecc-384-modp.asm function in the Nettle cryptographic library, which incorrectly handles carry propagation and produces incorrect output in its implementation of the...
9.8CVSS0.05007EPSS
SaveExploits0References55
20