CVE-2015-8805

🗓️ 31 Dec 2015 00:00:00Reported by ubuntu.comType

The ecc_256_modq function in Nettle before 3.2 does not properly handle carry propagation, leading to incorrect output in P-256 NIST elliptic curve implementation, enabling unspecified impact via unknown vectors

Reporter	Title	Published	Views	Family All 65
ArchLinux	nettle: improper cryptographic calculations	3 Feb 201600:00	–	archlinux
ArchLinux	lib32-nettle: improper cryptographic calculations	3 Feb 201600:00	–	archlinux
BDU FSTEC	The vulnerability of Nettle’s cryptographic library allows a hacker to compromise the integrity, accessibility, and confidentiality of information.	17 Mar 201600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Nettle’s cryptographic library allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.	31 Mar 201600:00	–	bdu_fstec
Tenable Nessus	CentOS 7 : nettle (CESA-2016:2582)	28 Nov 201600:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP1 : nettle (EulerOS-SA-2016-1061)	1 May 201700:00	–	nessus
Tenable Nessus	Fedora 23 : nettle-3.2-1.fc23 (2016-89968f88d2)	4 Mar 201600:00	–	nessus
Tenable Nessus	Fedora 22 : nettle-2.7.1-6.fc22 (2016-8ee88aee21)	4 Mar 201600:00	–	nessus
Tenable Nessus	Fedora 23 : mingw-gnutls-3.4.9-1.fc23 / mingw-nettle-3.2-1.fc23 (2016-aa00f0631d)	4 Mar 201600:00	–	nessus
Tenable Nessus	Fedora 23 : compat-nettle27 (2016-d94300845b)	14 Jul 201600:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Ubuntu	14.04	any	nettle	2.7.1-1ubuntu0.1	nettle_2.7.1-1ubuntu0.1_any.deb
Ubuntu	15.10	any	nettle	3.1.1-4ubuntu0.1	nettle_3.1.1-4ubuntu0.1_any.deb

Source	Link
seclists	www.seclists.org/oss-sec/2016/q1/273
blog	www.blog.fuzzing-project.org/38-Miscomputations-of-elliptic-curve-scalar-multiplications-in-Nettle.html
lists	www.lists.gnu.org/archive/html/info-gnu/2016-01/msg00006.html
ubuntu	www.ubuntu.com/security/notices/USN-2897-1
cve	www.cve.org/CVERecord

25 Aug 2025 21:49Current

7.1High risk

Vulners AI Score7.1

CVSS 27.5

CVSS 39.8

EPSS0.12343