Summary
It was discovered that Nettle incorrectly mitigated certain timing
side-channel attacks. A remote attacker could possibly use this flaw to
recover private keys.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | nettle | 2.7.1-1ubuntu0.2 |
| Ubuntu · 16.04 LTS 16.04:LTS | nettle | 3.2-1ubuntu0.16.04.1 |
Vulnerabilities 1
-
Unscored —
The RSA and DSA decryption code in Nettle makes it easier for attackers to discover private keys via a cache side chann…
References
-
report
https://ubuntu.com/security/CVE-2016-6489