Skip to content
OpenAdvisories
Unscored USN-2897-1 3 CVEs

nettle vulnerabilities

Published Feb 15, 2016 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

Hanno Böck discovered that Nettle incorrectly handled carry propagation in
the NIST P-256 elliptic curve. (CVE-2015-8803)

Hanno Böck discovered that Nettle incorrectly handled carry propagation in
the NIST P-384 elliptic curve. (CVE-2015-8804)

Niels Moeller discovered that Nettle incorrectly handled carry propagation
in the NIST P-256 elliptic curve. (CVE-2015-8805)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS nettle 2.7.1-1ubuntu0.1

Vulnerabilities 3

  • Unscored —
    CVE-2015-8803

    The ecc_256_modp function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces inc…

    nettle nettle Debian Ubuntu
  • Unscored —
    CVE-2015-8804

    x86_64/ecc-384-modp.asm in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output i…

    nettle nettle Debian Ubuntu
  • Unscored —
    CVE-2015-8805

    The ecc_256_modq function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces inc…

    nettle nettle Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2015-8803
  • report
    https://ubuntu.com/security/CVE-2015-8804
  • report
    https://ubuntu.com/security/CVE-2015-8805