Summary
It was discovered that Nettle incorrectly handled signature verification.
A remote attacker could use this issue to cause Nettle to crash, resulting
in a denial of service, or possibly force invalid signatures.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | nettle | 3.2-1ubuntu0.16.04.2 |
| Ubuntu · 18.04 LTS 18.04:LTS | nettle | 3.4-1ubuntu0.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | nettle | 3.5.1+really3.5.1-2ubuntu0.1 |
Vulnerabilities 1
-
Unscored —
A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions (GOST DSA, E…
References
-
report
https://ubuntu.com/security/CVE-2021-20305