Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions (GOST DSA, EDDSA & ECDSA) result in the Elliptic Curve Cryptography point (ECC) multiply function being called with out-of-range scalers, possibly resulting in incorrect results. This flaw allows an attacker to force an invalid signature, causing an assertion failure or possible validation. The highest threat to this vulnerability is to confidentiality, integrity, as well as system availability.
CVSS Information
N/A
Vulnerability Type
使用已被攻破或存在风险的密码学算法
Vulnerability Title
Linux Nettle 缓冲区错误漏洞
Vulnerability Description
Linux Nettle是Linux开源的一个应用软件。包含的设计适合很容易在许多情况下一个低级别的密码库。 Linux Nettle 中存在缓冲区错误漏洞。该漏洞源于椭圆曲线加密点 (ECC) 乘法函数被调用超出范围的缩放器。
CVSS Information
N/A
Vulnerability Type
N/A