All packages
Nettle vulnerabilities
3 known CVE vulnerabilities in Nettle, translated and rated.
- CVE-2016-6489High
The RSA and DSA decryption code in Nettle makes it easier for attackers to discover private keys via a cache side channel attack.
- CVE-2015-8805Critical
The ecc_256_modq function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation, leading to incorrect output in its implementation of the P-256 NIST elliptic curve.
- CVE-2015-8804Critical
In Nettle versions before 3.2, the x86_64/ecc-384-modp.asm file does not properly handle carry propagation, leading to incorrect output in its implementation of the P-384 NIST elliptic curve.