nettle uses incorrect signature verification. Some flaws in Several Nettle signature verification functions (GOST DSA, EDDSA & ECDSA) allows an attacker to force an invalid signature, causing an assertion failure or possible validation.

References

bugzilla.redhat.com/show_bug.cgi?id=1942533

lists.debian.org/debian-lts-announce/2021/09/msg00008.html

lists.fedoraproject.org/archives/list/[email protected]/message/MQKWVVMAIDAJ7YAA3VVO32BHLDOH2E63/

secdb.alpinelinux.org/v3.13/main.yaml

security.gentoo.org/glsa/202105-31

security.netapp.com/advisory/ntap-20211022-0002/

www.debian.org/security/2021/dsa-4933

nessus 47

redhat 26

oraclelinux 2

alpinelinux 1

osv 6

fedora 1

f5 1

openvas 16

redos 21

prion 1

cvelist 1

ubuntucve 1

debiancve 1

altlinux 2

cbl_mariner 1

rocky 1

redhatcve 1

amazon 1

slackware 1

almalinux 1

cloudfoundry 1

cve 1

ubuntu 1

suse 1

centos 1

gentoo 1

photon 8

nvd 1

debian 3

rosalinux 1

mageia 1

ibm 6

ics 1

nessus

Rocky Linux 8 : gnutls and nettle (RLSA-2021:1206)

2023-11-07 00:00:00

Slackware 14.2 / current : gnutls (SSA:2021-145-01)

2021-05-26 00:00:00

NewStart CGSL CORE 5.05 / MAIN 5.05 : nettle Vulnerability (NS-SA-2022-0039)

2022-05-10 00:00:00

redhat

(RHSA-2021:1246) Important: gnutls and nettle security update

2021-04-19 11:27:37

(RHSA-2021:2356) Important: nettle security update

2021-06-09 08:30:05

(RHSA-2021:1245) Important: gnutls and nettle security update

2021-04-19 11:26:49

oraclelinux

gnutls and nettle security update

2021-04-16 00:00:00

nettle security update

2021-04-09 00:00:00

alpinelinux

CVE-2021-20305

2021-04-05 22:15:12

osv

nettle vulnerability

2021-04-13 15:00:11

CGA-jrgv-6vmg-8276

2024-06-06 12:26:08

CVE-2021-20305

2021-04-05 22:15:12

fedora

[SECURITY] Fedora 33 Update: gnutls-3.6.16-1.fc33

2021-06-01 01:06:08

K33101555 : Nettle cryptography library vulnerability CVE-2021-20305

2021-06-08 00:00:00

openvas

Ubuntu: Security Advisory (USN-4906-1)

2021-04-14 00:00:00

CentOS: Security Advisory for nettle (CESA-2021:1145)

2021-04-17 00:00:00

SUSE: Security Advisory (SUSE-SU-2021:1399-1)

2021-06-09 00:00:00

redos

ROS-2-583

2023-07-06 00:00:00

ROS-2-830

2021-09-08 00:00:00

ROS-2-500

2021-09-08 00:00:00

prion

Design/Logic Flaw

2021-04-05 22:15:00

cvelist

CVE-2021-20305

2021-04-05 21:31:06

ubuntucve

CVE-2021-20305

2021-04-05 00:00:00

debiancve

CVE-2021-20305

2021-04-05 22:15:12

altlinux

Security fix for the ALT Linux 9 package gnutls30 version 3.6.16-alt1

2021-06-09 00:00:00

Security fix for the ALT Linux 10 package gnutls30 version 3.6.16-alt1

2021-05-31 00:00:00

cbl_mariner

CVE-2021-20305 affecting package nettle 3.4.1-2

2021-05-06 23:56:43

rocky

gnutls and nettle security update

2021-04-14 20:07:45

redhatcve

CVE-2021-20305

2021-03-31 17:08:42

amazon

Important: nettle

2021-04-20 17:55:00

slackware

[slackware-security] gnutls

2021-05-25 18:17:19

almalinux

Important: gnutls and nettle security update

2021-04-14 20:07:45

cloudfoundry

USN-4906-1: Nettle vulnerability | Cloud Foundry

2021-04-29 00:00:00

cve

CVE-2021-20305

2021-04-05 22:15:12

ubuntu

Nettle vulnerability

2021-04-13 00:00:00

suse

Security update for libnettle (important)

2021-05-01 00:00:00

centos

nettle security update

2021-04-16 20:23:43

gentoo

Nettle: Denial of service

2021-05-26 00:00:00

photon

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2021-2.0-0339

2021-04-21 00:00:00

Critical Photon OS Security Update - PHSA-2021-0339

2021-04-21 00:00:00

Critical Photon OS Security Update - PHSA-2021-0223

2021-04-21 00:00:00

nvd

CVE-2021-20305

2021-04-05 22:15:12

debian

[SECURITY] [DSA 4933-1] nettle security update

2021-06-18 18:58:09

[SECURITY] [DLA 2760-1] nettle security update

2021-09-18 14:46:40

[SECURITY] [DSA 4933-1] nettle security update

2021-06-18 18:58:09

rosalinux

Advisory ROSA-SA-2021-1930

2021-07-02 17:33:14

mageia

Updated nettle packages fix security vulnerabilities

2021-06-29 20:31:40

ibm

Security Bulletin: IBM QRadar Network Security is affected by multiple vulnerabilities (CVE-2020-25648, CVE-2021-31535, CVE-2021-20305, CVE-2020-25692)

2021-11-08 03:57:51

Security Bulletin: Multiple vulnerabilites affect IBM Jazz Foundation and IBM Engineering products.

2021-07-16 17:54:43

Security Bulletin: Cloud Pak for Security has several security vulnerabilities addressed in the latest version

2021-07-30 07:38:48

ics

Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1

2023-12-14 12:00:00

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

EPSS

0.01

Percentile

83.4%

JSON

Related for VERACODE:30010