The OCB feature in libnettle in Nettle 3.9 before 3.9.1 allows memory corruption.
References
Configurations
History
21 Nov 2024, 08:10
Type | Values Removed | Values Added |
---|---|---|
References | () https://bugzilla.suse.com/show_bug.cgi?id=1212112 - Issue Tracking, Patch | |
References | () https://git.lysator.liu.se/nettle/nettle/-/commit/867a4548b95705291a3afdd66d76e7f17ba2618f - Patch | |
References | () https://git.lysator.liu.se/nettle/nettle/-/compare/nettle_3.9_release_20230514...nettle_3.9.1_release_20230601 - Patch | |
References | () https://security.gentoo.org/glsa/202401-24 - |
16 Jan 2024, 15:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
03 Jul 2023, 19:20
Type | Values Removed | Values Added |
---|---|---|
First Time |
Nettle Project
Nettle Project nettle |
|
CPE | cpe:2.3:a:nettle_project:nettle:3.9:*:*:*:*:*:*:* | |
References | (MISC) https://git.lysator.liu.se/nettle/nettle/-/compare/nettle_3.9_release_20230514...nettle_3.9.1_release_20230601 - Patch | |
References | (MISC) https://bugzilla.suse.com/show_bug.cgi?id=1212112 - Issue Tracking, Patch | |
References | (MISC) https://git.lysator.liu.se/nettle/nettle/-/commit/867a4548b95705291a3afdd66d76e7f17ba2618f - Patch | |
CWE | CWE-787 | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
25 Jun 2023, 22:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-06-25 22:15
Updated : 2024-11-21 08:10
NVD link : CVE-2023-36660
Mitre link : CVE-2023-36660
CVE.ORG link : CVE-2023-36660
JSON object : View
Products Affected
nettle_project
- nettle
CWE
CWE-787
Out-of-bounds Write