A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An attacker could use this flaw to provide a manipulated ciphertext leading to application crash and denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gnutlsUpgrade gnutls-utilsUpgrade nettle-develUpgrade gnutls-develUpgrade gnutls-daneUpgrade nettleUpgrade gnutls-c++ | May 4, 2022 | Aug 5, 2021 |
| Alpine Linux | — | Upgrade nettle | Mar 26, 2024 | Aug 5, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 5, 2021 |
| Centos_linux | — | Upgrade gnutls-develUpgrade gnutls-dane-debuginfoUpgrade gnutls-c++Upgrade gnutls-debuginfoUpgrade nettleUpgrade gnutls-daneUpgrade gnutls-utils-debuginfoUpgrade gnutls-debugsourceUpgrade nettle-debuginfoUpgrade gnutlsUpgrade nettle-develUpgrade gnutls-c++-debuginfoUpgrade gnutls-utilsUpgrade nettle-debugsource | Nov 10, 2021 | Aug 5, 2021 |
| Debian | — | Upgrade nettle | Jun 21, 2021 | Jun 21, 2021 |
| Gentoo Linux | — | Upgrade dev-libs/nettle. | Jan 17, 2024 | Aug 5, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade nettle-develUpgrade nettle | Sep 16, 2021 | Aug 5, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade nettleUpgrade nettle-devel | Oct 26, 2021 | Aug 5, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade nettle-develUpgrade nettle | Sep 29, 2021 | Aug 5, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade nettleUpgrade nettle-devel | Sep 24, 2021 | Aug 5, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade nettle | Sep 29, 2021 | Aug 5, 2021 |
| Oracle Solaris | — | Upgrade library/security/nettle to version 3.7.3-11.4.39.0.1.107.0 on Solaris 11.4 | Nov 17, 2021 | Aug 5, 2021 |
| Oracle_linux | — | Upgrade gnutls-c++Upgrade gnutls-develUpgrade gnutls-daneUpgrade nettleUpgrade gnutlsUpgrade gnutls-utilsUpgrade nettle-devel | Nov 17, 2021 | Jun 7, 2021 |
| Redhat_linux | — | Upgrade gnutls-c++Upgrade gnutlsUpgrade gnutls-utilsUpgrade gnutls-utils-debuginfoUpgrade gnutls-debugsourceUpgrade nettleUpgrade nettle-develUpgrade gnutls-debuginfoUpgrade nettle-debuginfoUpgrade gnutls-c++-debuginfoUpgrade nettle-debugsourceUpgrade gnutls-develNo solution existsUpgrade gnutls-daneUpgrade gnutls-dane-debuginfo | Nov 10, 2021 | Aug 5, 2021 |
| Rocky_linux | — | Upgrade gnutls-c++Upgrade gnutls-dane-debuginfoUpgrade nettle-debuginfoUpgrade nettle-develUpgrade gnutls-utilsUpgrade gnutls-debuginfoUpgrade nettleUpgrade gnutls-daneUpgrade gnutls-utils-debuginfoUpgrade gnutls-c++-debuginfoUpgrade nettle-debugsourceUpgrade gnutlsUpgrade gnutls-develUpgrade gnutls-debugsource | Sep 2, 2022 | Aug 5, 2021 |
| Suse | — | Upgrade libnettle8Upgrade libhogweed2-32bitUpgrade libhogweed4-32bitUpgrade libnettle4Upgrade libnettle8-32bitUpgrade libhogweed6Upgrade libnettle6Upgrade nettleUpgrade libnettle-develUpgrade libnettle4-32bitUpgrade libhogweed6-32bitUpgrade libhogweed4Upgrade libhogweed2Upgrade libnettle-devel-32bitUpgrade libnettle6-32bit | Jun 24, 2021 | Jun 17, 2021 |
| Ubuntu | — | Upgrade libnettle7Upgrade libnettle6Upgrade libnettle8 | Jun 18, 2021 | Jun 17, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 5, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub