CVE

Id
86081  
CVE No.
CVE-2015-8804  
Status
Candidate  
Description
x86_64/ecc-384-modp.asm in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-384 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors.  
Phase
Assigned (20160202)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
757075 86081 CVE-2015-8804 MLIST:[info-gnu] 20160128 ANNOUNCE: Nettle-3.2  View
757076 86081 CVE-2015-8804 URL:https://lists.gnu.org/archive/html/info-gnu/2016-01/msg00006.html  View
757077 86081 CVE-2015-8804 MLIST:[nettle-bugs] 20151211 Miscalculations on secp384 curve  View
757078 86081 CVE-2015-8804 URL:https://lists.lysator.liu.se/pipermail/nettle-bugs/2015/003024.html  View
757079 86081 CVE-2015-8804 MLIST:[oss-security] 20160202 Miscomputations of elliptic curve scalar multiplications in Nettle  View
757080 86081 CVE-2015-8804 URL:http://www.openwall.com/lists/oss-security/2016/02/02/2  View
757081 86081 CVE-2015-8804 MLIST:[oss-security] 20160202 Re: Miscomputations of elliptic curve scalar multiplications in Nettle  View
757082 86081 CVE-2015-8804 URL:http://www.openwall.com/lists/oss-security/2016/02/03/1  View
757083 86081 CVE-2015-8804 MISC:https://blog.fuzzing-project.org/38-Miscomputations-of-elliptic-curve-scalar-multiplications-in-Nettle.html  View
757084 86081 CVE-2015-8804 CONFIRM:https://git.lysator.liu.se/nettle/nettle/commit/fa269b6ad06dd13c901dbd84a12e52b918a09cd7  View
757085 86081 CVE-2015-8804 SUSE:openSUSE-SU-2016:0475  View
757086 86081 CVE-2015-8804 URL:http://lists.opensuse.org/opensuse-updates/2016-02/msg00091.html  View
757087 86081 CVE-2015-8804 SUSE:openSUSE-SU-2016:0477  View
757088 86081 CVE-2015-8804 URL:http://lists.opensuse.org/opensuse-updates/2016-02/msg00093.html  View
757089 86081 CVE-2015-8804 SUSE:openSUSE-SU-2016:0486  View
757090 86081 CVE-2015-8804 URL:http://lists.opensuse.org/opensuse-updates/2016-02/msg00100.html  View
757091 86081 CVE-2015-8804 UBUNTU:USN-2897-1  View

Related JVN