VDB

GCVE-110-MAGEIA-2016-61

GCVE-110-MAGEIA-2016-61
Advisory Published
Vulnetix · Advisory published February 9, 2016
Updated nettle2.7 and nettle packages fix security vulnerabilities: Two carry propagation bugs in elliptic curve scalar multiplications that affect the NIST P-256 curve. The bugs are in the C code and affect multiple architectures (CVE-2015-8803, CVE-2015-8805). A carry propagation bug in elliptic curve scalar multiplications that affect the NIST P-384 curve. The bug is in the assembly code and only affects the x86_64 architecture (CVE-2015-8804).

Affected Products

VendorProductVersionsPlatforms
Mageiakaffeine0 (affected), 1.3.1-1.mga5 (unaffected)
Mageianettle2.70 (affected), 2.7.1-6.1.mga5 (unaffected), 0 (affected), 2.7.1-6.1.mga5 (unaffected)
Mageianettle0 (affected), 3.0-3.1.mga5 (unaffected), 0 (affected), 3.0-3.1.mga5 (unaffected)

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›