CVE-2016-6489

Description

References

• rhn.redhat.com/errata/RHSA-2016-2582.html · Third Party Advisory
• openwall.com/lists/oss-security/2016/07/29/7 · Mailing List
• ubuntu.com/usn/USN-3193-1 · Third Party Advisory
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• eprint.iacr.org/2016/596.pdf · Technical Description
• git.lysator.liu.se/nettle/nettle/commit/3fe1d6549765ecfb24f0b80b2ed086fdc818bff3 · Patch
• security.gentoo.org/glsa/201706-21 · Third Party Advisory
• oracle.com/security-alerts/cpuapr2020.html · Third Party Advisory

nettle 的其他漏洞

• CVE-2023-36660严重 9.8The OCB feature in libnettle in Nettle 3.9 before 3.9.1 allows memory corruption.
• CVE-2021-3580高危 7.5A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An attacker could use this flaw to provi…
• CVE-2021-20305高危 8.1A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions (GOST DSA, EDDSA & ECDSA) result …
• CVE-2018-16869中危 5.7A Bleichenbacher type side-channel based padding oracle attack was found in the way nettle handles endian conversion of RSA decrypted PKCS#1…
• CVE-2015-8805严重 9.8The ecc_256_modq function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its …