nettle project kayıtları
nettle project üreticisine ait 8 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %87,5
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-203 Observable Discrepancy2
- CWE-254 7PK - Security Features2
- CWE-20 Improper Input Validation1
- CWE-310 Cryptographic Issues1
- CWE-327 Use of a Broken or Risky Cryptographic Algorithm1
- CWE-787 Out-of-bounds Write1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
8 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2015-8803İstismar yok | The ecc_256_modp function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its nettle project · nettle · CWE-254 | Kritik9,8 | — | %4,2 | 23 Şub 2016 |
40Planlayın | CVE-2015-8804İstismar yok | x86_64/ecc-384-modp.asm in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation nettle project · nettle · CWE-254 | Kritik9,8 | — | %3,9 | 23 Şub 2016 |
40Planlayın | CVE-2015-8805İstismar yok | The ecc_256_modq function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its nettle project · nettle · CWE-310 | Kritik9,8 | — | %2,7 | 23 Şub 2016 |
39İzleyin | CVE-2023-36660İstismar yok | The OCB feature in libnettle in Nettle 3.9 before 3.9.1 allows memory corruption.nettle project · nettle · CWE-787 | Kritik9,8 | — | %1,0 | 25 Haz 2023 |
33İzleyin | CVE-2021-20305İstismar yok | A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions (GOST DSA, EDDSA & ECDSA) result nettle project · nettle · CWE-327 | Yüksek8,1 | — | %1,7 | 5 Nis 2021 |
32İzleyin | CVE-2016-6489İstismar yok | The RSA and DSA decryption code in Nettle makes it easier for attackers to discover private keys via a cache side channel attack.redhat · enterprise linux desktop · CWE-203 | Yüksek7,5 | — | %5,0 | 14 Nis 2017 |
31İzleyin | CVE-2021-3580İstismar yok | A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext.nettle project · nettle · CWE-20 | Yüksek7,5 | — | %2,7 | 5 Ağu 2021 |
22İzleyin | CVE-2018-16869İstismar yok | A Bleichenbacher type side-channel based padding oracle attack was found in the way nettle handles endian conversion of RSA decrypted PKCS#1nettle project · nettle · CWE-203 | Orta5,7 | — | %1,4 | 3 Ara 2018 |
- CVE-2015-880340Planlayın
The ecc_256_modp function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its
KritikCVSS 9,8İstismar yokEPSS %4nettle project · nettle23 Şub 2016
- CVE-2015-880440Planlayın
x86_64/ecc-384-modp.asm in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation
KritikCVSS 9,8İstismar yokEPSS %3nettle project · nettle23 Şub 2016
- CVE-2015-880540Planlayın
The ecc_256_modq function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its
KritikCVSS 9,8İstismar yokEPSS %2nettle project · nettle23 Şub 2016
- CVE-2023-3666039İzleyin
The OCB feature in libnettle in Nettle 3.9 before 3.9.1 allows memory corruption.
KritikCVSS 9,8İstismar yokEPSS %1nettle project · nettle25 Haz 2023
- CVE-2021-2030533İzleyin
A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions (GOST DSA, EDDSA & ECDSA) result
YüksekCVSS 8,1İstismar yokEPSS %1nettle project · nettle5 Nis 2021
- CVE-2016-648932İzleyin
The RSA and DSA decryption code in Nettle makes it easier for attackers to discover private keys via a cache side channel attack.
YüksekCVSS 7,5İstismar yokEPSS %5redhat · enterprise linux desktop14 Nis 2017
- CVE-2021-358031İzleyin
A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext.
YüksekCVSS 7,5İstismar yokEPSS %2nettle project · nettle5 Ağu 2021
- CVE-2018-1686922İzleyin
A Bleichenbacher type side-channel based padding oracle attack was found in the way nettle handles endian conversion of RSA decrypted PKCS#1
OrtaCVSS 5,7İstismar yokEPSS %1nettle project · nettle3 Ara 2018