Lucene search
+L

19 matches found

SUSE CVE
SUSE CVE
•added 2023/02/15 3:47 a.m.•14 views

SUSE CVE-2021-20305

A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions GOST DSA, EDDSA & ECDSA result in the Elliptic Curve Cryptography point ECC multiply function being called with out-of-range scalers, possibly resulting in incorrect results. This flaw allow...

8.1CVSS6.5AI score0.01742EPSS
SaveExploits0References112
Tenable Nessus
Tenable Nessus
•added 2022/05/10 12:00 a.m.•34 views

NewStart CGSL CORE 5.05 / MAIN 5.05 : nettle Vulnerability (NS-SA-2022-0039)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has nettle packages installed that are affected by a vulnerability: - A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions GOST DSA, EDDSA & ECDSA result in the Elliptic Cur...

8.1CVSS6.5AI score0.01742EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2022/02/13 12:00 a.m.•22 views

Huawei EulerOS: Security Advisory for nettle (EulerOS-SA-2022-1084)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS6.6AI score0.02708EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2022/02/13 12:00 a.m.•35 views

EulerOS Virtualization 3.0.6.0 : nettle (EulerOS-SA-2022-1084)

According to the versions of the nettle packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions GOST DSA, EDDSA & ECDS...

8.1CVSS6.5AI score0.02708EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2021/11/17 12:00 a.m.•21 views

Huawei EulerOS: Security Advisory for nettle (EulerOS-SA-2021-2734)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS6.6AI score0.02708EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2021/11/17 12:00 a.m.•27 views

Huawei EulerOS: Security Advisory for nettle (EulerOS-SA-2021-2786)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS6.6AI score0.02708EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2021/08/09 12:00 a.m.•29 views

Huawei EulerOS: Security Advisory for nettle (EulerOS-SA-2021-2307)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS6.7AI score0.01742EPSS
SaveExploits0References2
Rosalinux
Rosalinux
•added 2021/07/02 5:33 p.m.•70 views

Advisory ROSA-SA-2021-1930

Software: nettle 2.7.1 OS: Cobalt 7.9 CVE-ID: CVE-2018-16869 CVE-Crit: MEDIUM. CVE-DESC: An oracle attack based on a Bleichenbacher-type side-channel was discovered in the way nettle handles the final transformation of PKCS 1 v1.5 data decrypted with RSA. An attacker who could run a process on th...

8.1CVSS6.3AI score0.01742EPSS
SaveExploits0
Mageia
Mageia
•added 2021/06/29 5:31 p.m.•62 views

Updated nettle packages fix security vulnerabilities

Remote crash in RSA decryption via manipulated ciphertext CVE-2021-3580. A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions GOST DSA, EDDSA & ECDSA result in the Elliptic Curve Cryptography point ECC multiply function being called with...

8.1CVSS6.3AI score0.02708EPSS
SaveExploits0References5
Amazon
Amazon
•added 2021/04/21 12:00 a.m.•56 views

Important: nettle

Issue Overview: A flaw was found in Nettle, where several Nettle signature verification functions GOST DSA, EDDSA & ECDSA result in the Elliptic Curve Cryptography point ECC multiply function being called with out-of-range scalers, possibly resulting in incorrect results. This flaw allows an...

8.1CVSS6.7AI score0.01742EPSS
SaveExploits0
Veracode
Veracode
•added 2021/04/17 12:58 a.m.•42 views

Incorrect Signature Verification

nettle uses incorrect signature verification. Some flaws in Several Nettle signature verification functions GOST DSA, EDDSA & ECDSA allows an attacker to force an invalid signature, causing an assertion failure or possible validation...

8.1CVSS6.7AI score0.01742EPSS
SaveExploits0References8Affected Software2
osv_cve
osv_cve
•added 2021/04/05 10:15 p.m.•44 views

CVE-2021-20305

A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions GOST DSA, EDDSA & ECDSA result in the Elliptic Curve Cryptography point ECC multiply function being called with out-of-range scalers, possibly resulting in incorrect results. This flaw allow...

8.1CVSS6.5AI score
SaveExploits0References6
osv_debian
osv_debian
•added 2021/04/05 10:15 p.m.•9 views

DEBIAN-CVE-2021-20305

A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions GOST DSA, EDDSA & ECDSA result in the Elliptic Curve Cryptography point ECC multiply function being called with out-of-range scalers, possibly resulting in incorrect results. This flaw allow...

8.1CVSS6.5AI score0.01742EPSS
SaveExploits0References1
Prion
Prion
•added 2021/04/05 10:15 p.m.•44 views

Design/Logic Flaw

A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions GOST DSA, EDDSA & ECDSA result in the Elliptic Curve Cryptography point ECC multiply function being called with out-of-range scalers, possibly resulting in incorrect results. This flaw allow...

6.8CVSS7.7AI score0.01742EPSS
SaveExploits0References6Affected Software4
CVE
CVE
•added 2021/04/05 9:31 p.m.•692 views

CVE-2021-20305

CVE-2021-20305 affects Nettle prior to 3.7.2 where signature verification (GOST DSA, EDDSA, ECDSA) calls ECC multiply with out-of-range scalars, potentially producing incorrect results and allowing an attacker to force an invalid signature (leading to assertion failure or validation issues). Docu...

8.1CVSS6.5AI score0.01742EPSS
SaveExploits0References7Affected Software1
Cvelist
Cvelist
•added 2021/04/05 9:31 p.m.•67 views

CVE-2021-20305

A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions GOST DSA, EDDSA & ECDSA result in the Elliptic Curve Cryptography point ECC multiply function being called with out-of-range scalers, possibly resulting in incorrect results. This flaw allow...

8.2AI score0.01742EPSS
SaveExploits0References6
Mend
Mend
•added 2021/04/05 9:31 p.m.•3 views

CVE-2021-20305

A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions GOST DSA, EDDSA & ECDSA result in the Elliptic Curve Cryptography point ECC multiply function being called with out-of-range scalers, possibly resulting in incorrect results. This flaw allow...

9.2CVSS0.01742EPSS
SaveExploits0References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/05 12:00 a.m.•8 views

CVE-2021-20305: Use of a Broken or Risky Cryptographic Algorithm

A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions GOST DSA, EDDSA & ECDSA result in the Elliptic Curve Cryptography point ECC multiply function being called with out-of-range scalers, possibly resulting in incorrect results. This flaw allow...

8.1CVSS6.5AI score0.01742EPSS
SaveExploits0References13
RedhatCVE
RedhatCVE
•added 2021/03/31 5:08 p.m.•47 views

CVE-2021-20305

A flaw was found in Nettle, where several Nettle signature verification functions GOST DSA, EDDSA & ECDSA result in the Elliptic Curve Cryptography point ECC multiply function being called with out-of-range scalers, possibly resulting in incorrect results. This flaw allows an attacker to force an...

8.1CVSS6.6AI score0.01742EPSS
SaveExploits0References4
Rows per page
Query Builder