PT-2023-25663 · Nettle · Nettle

CVE-2023-36660

Published

2023-06-25

Updated

2024-01-16

CVSS v3.1

9.8

Critical

Vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Nettle versions 3.9 through 3.9.0

Description The issue allows memory corruption due to a problem in the OCB feature in libnettle.

Recommendations For versions 3.9 through 3.9.0, update to version 3.9.1 or later to resolve the issue.

Exploit

Fix

Memory Corruption

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2023-36660

OPENSUSE-SU-2024:13024-1

Nettle