The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The ecc_256_modq function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-256 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors, a different vulnerability than CVE-2015-8803.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade nettle | Aug 30, 2017 | Feb 23, 2016 |
| Debian | — | Upgrade nettle | Jul 30, 2024 | Feb 23, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade nettle-develUpgrade nettle | Nov 30, 2017 | Feb 23, 2016 |
| Oracle_linux | — | Upgrade nettleUpgrade nettle-devel | Nov 9, 2016 | Feb 23, 2016 |
| Redhat_linux | — | Upgrade nettle-debuginfoUpgrade nettle-develUpgrade nettle | Nov 4, 2016 | Feb 23, 2016 |
| Suse | — | Upgrade libnettle4Upgrade libhogweed4Upgrade libnettle6-32bitUpgrade libnettle6Upgrade libnettle-develUpgrade libnettle4-32bitUpgrade libhogweed2Upgrade libhogweed4-32bitUpgrade libhogweed2-32bit | Feb 23, 2016 | Feb 23, 2016 |
| Ubuntu | — | Upgrade libnettle6Upgrade libnettle4 | Feb 23, 2016 | Feb 15, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub