Summary
It was discovered that Nettle incorrectly handled RSA decryption. A remote
attacker could possibly use this issue to cause Nettle to crash, resulting
in a denial of service. (CVE-2021-3580)
It was discovered that Nettle incorrectly handled certain padding oracles.
A remote attacker could possibly use this issue to perform a variant of the
Bleichenbacher attack. This issue only affected Ubuntu 18.04 LTS.
(CVE-2018-16869)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | nettle | 3.4.1-0ubuntu0.18.04.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | nettle | 3.5.1+really3.5.1-2ubuntu0.2 |
Vulnerabilities 2
-
Medium 4.7
A Bleichenbacher type side-channel based padding oracle attack was found in the way nettle handles endian conversion of…
-
Unscored —
A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An attacker could u…