CVE-2021-3580CWE-20

CVE-2021-3580

High · published August 6, 2021

CVSS v3.1

7.5

EPSS

Percentile

85.9

In the wild

Unconfirmed

What it is

A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An attacker could use this flaw to provide a manipulated ciphertext leading to application crash and denial of service.

The record

Technical detail

CVSS v3.1: 7.5 · HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0: Not supplied
EPSS: 0.02708 · 85.9th percentile
Weakness: CWE-20 · Improper Input Validation
Published: 2021-08-06T01:15Z

Affected products (5)

Product	Versions	Fixed in
nettle_project/nettle	< 3.7.3	3.7.3
redhat/enterprise_linux	all versions	—
redhat/enterprise_linux	all versions	—
debian/debian_linux	all versions	—
netapp/ontap_select_deploy_administration_utility	all versions	—

References (9)

https://bugzilla.redhat.com/show_bug.cgi?id=1967983 · [email protected]https://lists.debian.org/debian-lts-announce/2021/09/msg00008.html · [email protected]https://security.gentoo.org/glsa/202401-24 · [email protected]https://security.netapp.com/advisory/ntap-20211104-0006/ · [email protected]https://bugzilla.redhat.com/show_bug.cgi?id=1967983 · af854a3a-2127-422b-91ae-364da2661108 https://lists.debian.org/debian-lts-announce/2021/09/msg00008.html · af854a3a-2127-422b-91ae-364da2661108 https://security.gentoo.org/glsa/202401-24 · af854a3a-2127-422b-91ae-364da2661108 https://security.netapp.com/advisory/ntap-20211104-0006/ · af854a3a-2127-422b-91ae-364da2661108 https://cert-portal.siemens.com/productcert/html/ssa-398330.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e

EPSS history

Timeline

05 AUG 00:00Z
A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext
cvelistv5