Lucene search
K

17 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 3:47 a.m.2 views

SUSE CVE-2021-20305

A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions GOST DSA, EDDSA & ECDSA result in the Elliptic Curve Cryptography point ECC multiply function being called with out-of-range scalers, possibly resulting in incorrect results. This flaw allow...

8.1CVSS6.7AI score0.01491EPSS
Exploits0References112
Tenable Nessus
Tenable Nessus
added 2022/05/10 12:0 a.m.26 views

NewStart CGSL CORE 5.05 / MAIN 5.05 : nettle Vulnerability (NS-SA-2022-0039)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has nettle packages installed that are affected by a vulnerability: - A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions GOST DSA, EDDSA & ECDSA result in the Elliptic Cur...

8.1CVSS6.3AI score0.01491EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2022/02/13 12:0 a.m.27 views

EulerOS Virtualization 3.0.6.0 : nettle (EulerOS-SA-2022-1084)

According to the versions of the nettle packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions GOST DSA, EDDSA & ECDS...

8.1CVSS6.3AI score0.02686EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2022/02/13 12:0 a.m.14 views

Huawei EulerOS: Security Advisory for nettle (EulerOS-SA-2022-1084)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS8.2AI score0.02686EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2021/11/17 12:0 a.m.16 views

Huawei EulerOS: Security Advisory for nettle (EulerOS-SA-2021-2786)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS8AI score0.02686EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2021/11/17 12:0 a.m.12 views

Huawei EulerOS: Security Advisory for nettle (EulerOS-SA-2021-2734)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS8AI score0.02686EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2021/08/09 12:0 a.m.18 views

Huawei EulerOS: Security Advisory for nettle (EulerOS-SA-2021-2307)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS8.2AI score0.01491EPSS
Exploits0References2
Rosalinux
Rosalinux
added 2021/07/02 5:33 p.m.38 views

Advisory ROSA-SA-2021-1930

Software: nettle 2.7.1 OS: Cobalt 7.9 CVE-ID: CVE-2018-16869 CVE-Crit: MEDIUM. CVE-DESC: An oracle attack based on a Bleichenbacher-type side-channel was discovered in the way nettle handles the final transformation of PKCS 1 v1.5 data decrypted with RSA. An attacker who could run a process on th...

8.1CVSS6.6AI score0.01495EPSS
Exploits0
Mageia
Mageia
added 2021/06/29 5:31 p.m.45 views

Updated nettle packages fix security vulnerabilities

Remote crash in RSA decryption via manipulated ciphertext CVE-2021-3580. A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions GOST DSA, EDDSA & ECDSA result in the Elliptic Curve Cryptography point ECC multiply function being called with...

8.1CVSS7.3AI score0.02686EPSS
Exploits0References5
Amazon
Amazon
added 2021/04/21 12:0 a.m.38 views

Important: nettle

Issue Overview: A flaw was found in Nettle, where several Nettle signature verification functions GOST DSA, EDDSA & ECDSA result in the Elliptic Curve Cryptography point ECC multiply function being called with out-of-range scalers, possibly resulting in incorrect results. This flaw allows an...

8.1CVSS6.9AI score0.01491EPSS
Exploits0
Veracode
Veracode
added 2021/04/17 12:58 a.m.29 views

Incorrect Signature Verification

nettle uses incorrect signature verification. Some flaws in Several Nettle signature verification functions GOST DSA, EDDSA & ECDSA allows an attacker to force an invalid signature, causing an assertion failure or possible validation...

8.1CVSS3.1AI score0.01491EPSS
Exploits0References8Affected Software2
OSV
OSV
added 2021/04/05 10:15 p.m.28 views

CVE-2021-20305

A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions GOST DSA, EDDSA & ECDSA result in the Elliptic Curve Cryptography point ECC multiply function being called with out-of-range scalers, possibly resulting in incorrect results. This flaw allow...

8.1CVSS6.5AI score
Exploits0References6
OSV
OSV
added 2021/04/05 10:15 p.m.1 views

DEBIAN-CVE-2021-20305

A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions GOST DSA, EDDSA & ECDSA result in the Elliptic Curve Cryptography point ECC multiply function being called with out-of-range scalers, possibly resulting in incorrect results. This flaw allow...

8.1CVSS6.2AI score0.01491EPSS
Exploits0References1
Prion
Prion
added 2021/04/05 10:15 p.m.27 views

Design/Logic Flaw

A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions GOST DSA, EDDSA & ECDSA result in the Elliptic Curve Cryptography point ECC multiply function being called with out-of-range scalers, possibly resulting in incorrect results. This flaw allow...

6.8CVSS7.7AI score0.01491EPSS
Exploits0References6Affected Software4
Cvelist
Cvelist
added 2021/04/05 9:31 p.m.24 views

CVE-2021-20305

A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions GOST DSA, EDDSA & ECDSA result in the Elliptic Curve Cryptography point ECC multiply function being called with out-of-range scalers, possibly resulting in incorrect results. This flaw allow...

8.2AI score0.01491EPSS
Exploits0References6
CVE
CVE
added 2021/04/05 9:31 p.m.651 views

CVE-2021-20305

CVE-2021-20305 affects Nettle prior to 3.7.2 where signature verification (GOST DSA, EDDSA, ECDSA) calls ECC multiply with out-of-range scalars, potentially producing incorrect results and allowing an attacker to force an invalid signature (leading to assertion failure or validation issues). Docu...

8.1CVSS6.7AI score0.01491EPSS
Exploits0References6Affected Software1
RedhatCVE
RedhatCVE
added 2021/03/31 5:8 p.m.34 views

CVE-2021-20305

A flaw was found in Nettle, where several Nettle signature verification functions GOST DSA, EDDSA & ECDSA result in the Elliptic Curve Cryptography point ECC multiply function being called with out-of-range scalers, possibly resulting in incorrect results. This flaw allows an attacker to force an...

8.1CVSS7.9AI score0.01491EPSS
Exploits0References4
Rows per page
Query Builder