CVE Catalog
CVE-2023-36660
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk0.83%
53th percentile - higher than 53% of all known CVEs
Summary
The OCB feature in libnettle in Nettle 3.9 before 3.9.1 allows memory corruption.
Risk Assessment
Memory corruption may lead to unauthorized data access or system crashes, posing a serious security threat to applications.
Recommendation
It is recommended to update the Nettle library to version 3.9.1 or later to mitigate this vulnerability.
Original NVD description (English source)
The OCB feature in libnettle in Nettle 3.9 before 3.9.1 allows memory corruption.