CVE-2023-36660

Description

References

• bugzilla.suse.com/show_bug.cgi · Issue Tracking
• git.lysator.liu.se/nettle/nettle/-/commit/867a4548b95705291a3afdd66d76e7f17ba2618f · Patch
• git.lysator.liu.se/nettle/nettle/-/compare/nettle_3.9_release_20230514...nettle_3.9.1_release_20230601 · Patch
• security.gentoo.org/glsa/202401-24
• cert-portal.siemens.com/productcert/html/ssa-794697.html

Altre vulnerabilità di nettle

• CVE-2021-3580ALTO 7.5A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An attacker could use this flaw to provi…
• CVE-2021-20305ALTO 8.1A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions (GOST DSA, EDDSA & ECDSA) result …
• CVE-2018-16869MEDIO 5.7A Bleichenbacher type side-channel based padding oracle attack was found in the way nettle handles endian conversion of RSA decrypted PKCS#1…
• CVE-2016-6489ALTO 7.5The RSA and DSA decryption code in Nettle makes it easier for attackers to discover private keys via a cache side channel attack.
• CVE-2015-8805CRITICO 9.8The ecc_256_modq function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its …