A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An attacker could use this flaw to provide a manipulated ciphertext leading to application crash and denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gnutls-utilsUpgrade gnutlsUpgrade nettle-develUpgrade gnutls-daneUpgrade gnutls-c++Upgrade gnutls-develUpgrade nettle | May 4, 2022 | Aug 5, 2021 |
| Alpine Linux | — | Upgrade nettle | Mar 26, 2024 | Aug 5, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 5, 2021 |
| Centos_linux | — | Upgrade gnutls-daneUpgrade gnutls-utils-debuginfoUpgrade gnutls-dane-debuginfoUpgrade gnutls-develUpgrade gnutls-c++Upgrade gnutls-debuginfoUpgrade nettleUpgrade gnutls-debugsourceUpgrade nettle-develUpgrade gnutls-utilsUpgrade nettle-debugsourceUpgrade gnutlsUpgrade gnutls-c++-debuginfoUpgrade nettle-debuginfo | Nov 10, 2021 | Aug 5, 2021 |
| Debian | — | Upgrade nettle | Jun 21, 2021 | Jun 21, 2021 |
| Gentoo Linux | — | Upgrade dev-libs/nettle. | Jan 17, 2024 | Aug 5, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade nettleUpgrade nettle-devel | Sep 16, 2021 | Aug 5, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade nettleUpgrade nettle-devel | Oct 26, 2021 | Aug 5, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade nettleUpgrade nettle-devel | Sep 29, 2021 | Aug 5, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade nettle-develUpgrade nettle | Sep 24, 2021 | Aug 5, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade nettle | Sep 29, 2021 | Aug 5, 2021 |
| Oracle Solaris | — | Upgrade library/security/nettle to version 3.7.3-11.4.39.0.1.107.0 on Solaris 11.4 | Nov 17, 2021 | Aug 5, 2021 |
| Oracle_linux | — | Upgrade nettle-develUpgrade gnutls-utilsUpgrade gnutls-daneUpgrade gnutls-c++Upgrade gnutlsUpgrade nettleUpgrade gnutls-devel | Nov 17, 2021 | Jun 7, 2021 |
| Redhat_linux | — | Upgrade gnutls-utilsUpgrade gnutls-utils-debuginfoUpgrade nettle-develUpgrade gnutlsUpgrade gnutls-c++Upgrade nettleUpgrade gnutls-debugsourceUpgrade gnutls-debuginfoUpgrade nettle-debuginfoUpgrade gnutls-dane-debuginfoUpgrade gnutls-develUpgrade gnutls-c++-debuginfoNo solution existsUpgrade gnutls-daneUpgrade nettle-debugsource | Nov 10, 2021 | Aug 5, 2021 |
| Rocky_linux | — | Upgrade gnutls-debuginfoUpgrade nettle-debugsourceUpgrade gnutlsUpgrade gnutls-c++-debuginfoUpgrade gnutls-daneUpgrade gnutls-develUpgrade nettleUpgrade gnutls-utils-debuginfoUpgrade gnutls-debugsourceUpgrade gnutls-dane-debuginfoUpgrade gnutls-c++Upgrade nettle-debuginfoUpgrade gnutls-utilsUpgrade nettle-devel | Sep 2, 2022 | Aug 5, 2021 |
| Suse | — | Upgrade libnettle4Upgrade libhogweed6Upgrade libnettle8Upgrade libhogweed4-32bitUpgrade libhogweed2-32bitUpgrade nettleUpgrade libnettle6Upgrade libnettle8-32bitUpgrade libhogweed6-32bitUpgrade libnettle4-32bitUpgrade libhogweed2Upgrade libnettle6-32bitUpgrade libnettle-develUpgrade libhogweed4Upgrade libnettle-devel-32bit | Jun 24, 2021 | Jun 17, 2021 |
| Ubuntu | — | Upgrade libnettle8Upgrade libnettle6Upgrade libnettle7 | Jun 18, 2021 | Jun 17, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 5, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub