Every CVE Search/ Get API key

CVE-2015-8804

x86_64/ecc-384-modp.asm in Nettle before 3.2 does not properly handle carry propagation and...

9.8 CriticalFix available

x86_64/ecc-384-modp.asm in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-384 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

3.98%Up 2.4 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 9.8

x86_64/ecc-384-modp.asm in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-384 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors.

Record
CVE-2015-8804
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-254, CWE-310
Updated
2026-11-02
CVE List No score

x86_64/ecc-384-modp.asm in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-384 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors.

Record
CVE-2015-8804
Updated
2026-11-02
EUVDEUVD-2015-8673 No score

x86_64/ecc-384-modp.asm in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-384 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors.

Record
EUVD-2015-8673
Updated
2026-11-03
GitHub AdvisoriesGHSA-7ph2-rj2g-hxp7 9.8

x86_64/ecc-384-modp.asm in Nettle before 3.2 does not properly handle carry propagation and...

x86_64/ecc-384-modp.asm in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-384 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors.

Record
GHSA-7ph2-rj2g-hxp7
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 9.8

x86_64/ecc-384-modp.asm in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-384 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors.

Record
CVE-2015-8804
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2015-8804 9.8

x86_64/ecc-384-modp.asm in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-384 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors.

Record
DEBIAN-CVE-2015-8804
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 6 moreShow less
OSVRHSA-2016:2582 7.4

Red Hat Security Advisory: nettle security and bug fix update

Record
RHSA-2016:2582
CVSS 3.0
7.4 HighCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2015-8804 9.8

x86_64/ecc-384-modp.asm in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-384 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors.

Record
UBUNTU-CVE-2015-8804
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVMGASA-2016-0061 No score

Updated nettle packages fix security vulnerabilities

Updated nettle2.7 and nettle packages fix security vulnerabilities:

Two carry propagation bugs in elliptic curve scalar multiplications that affect the NIST P-256 curve. The bugs are in the C code and affect multiple architectures (CVE-2015-8803, CVE-2015-8805).

A carry propagation bug in elliptic curve scalar multiplications that affect the NIST P-384 curve. The bug is in the assembly code and only affects the x86_64 architecture (CVE-2015-8804).

Record
MGASA-2016-0061
Updated
2026-11-02
OSVopenSUSE-SU-2024:10339-1 No score

libhogweed4-3.3-1.1 on GA media

These are all security issues fixed in the libhogweed4-3.3-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10339-1
Updated
2026-11-02
OSVSUSE-SU-2016:0455-1 No score

Security update for libnettle

This update for libnettle fixes the following security issues:

  • CVE-2015-8803: Fixed miscomputation bugs in secp-256r1 modulo functions. (bsc#964845)
  • CVE-2015-8804: Fixed carry folding bug in x86_64 ecc_384_modp. (bsc#964847)
  • CVE-2015-8805: Fixed miscomputation bugs in secp-256r1 modulo functions. (bsc#964849)
Record
SUSE-SU-2016:0455-1
Updated
2026-11-02
OSVUSN-2897-1 No score

nettle vulnerabilities

Hanno Böck discovered that Nettle incorrectly handled carry propagation in the NIST P-256 elliptic curve. (CVE-2015-8803)

Hanno Böck discovered that Nettle incorrectly handled carry propagation in the NIST P-384 elliptic curve. (CVE-2015-8804)

Niels Moeller discovered that Nettle incorrectly handled carry propagation in the NIST P-256 elliptic curve. (CVE-2015-8805)

Record
USN-2897-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
nettle
Debian:12
 before 3.2-1
3.2-1
nettle
Debian:13
 before 3.2-1
3.2-1
nettle
Debian:14
 before 3.2-1
3.2-1
nettle2.7
Mageia:5
 before 2.7.1-6.1.mga5
2.7.1-6.1.mga5
nettle
Mageia:5
 before 3.0-3.1.mga5
3.0-3.1.mga5
nettle-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:2.7.1-8.el7
0:2.7.1-8.el7
nettle-devel
Red Hat:enterprise_linux:7::client
 before 0:2.7.1-8.el7
0:2.7.1-8.el7
nettle
Red Hat:enterprise_linux:7::client
 before 0:2.7.1-8.el7
0:2.7.1-8.el7
nettle-debuginfo
Red Hat:enterprise_linux:7::computenode
 before 0:2.7.1-8.el7
0:2.7.1-8.el7
nettle-devel
Red Hat:enterprise_linux:7::computenode
 before 0:2.7.1-8.el7
0:2.7.1-8.el7
Show 16 moreShow less
Affected packages
PackageAffectedFixed
nettle
Red Hat:enterprise_linux:7::computenode
 before 0:2.7.1-8.el7
0:2.7.1-8.el7
nettle
Red Hat:enterprise_linux:7::server
 before 0:2.7.1-8.el7
0:2.7.1-8.el7
nettle-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:2.7.1-8.el7
0:2.7.1-8.el7
nettle-devel
Red Hat:enterprise_linux:7::server
 before 0:2.7.1-8.el7
0:2.7.1-8.el7
nettle
Red Hat:enterprise_linux:7::workstation
 before 0:2.7.1-8.el7
0:2.7.1-8.el7
nettle-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:2.7.1-8.el7
0:2.7.1-8.el7
nettle-devel
Red Hat:enterprise_linux:7::workstation
 before 0:2.7.1-8.el7
0:2.7.1-8.el7
libnettle
SUSE:Linux Enterprise Desktop 12
 before 2.7.1-9.1
2.7.1-9.1
libnettle
SUSE:Linux Enterprise Desktop 12 SP1
 before 2.7.1-9.1
2.7.1-9.1
libnettle
SUSE:Linux Enterprise Software Development Kit 12
 before 2.7.1-9.1
2.7.1-9.1
libnettle
SUSE:Linux Enterprise Software Development Kit 12 SP1
 before 2.7.1-9.1
2.7.1-9.1
libnettle
SUSE:Linux Enterprise Server 12
 before 2.7.1-9.1
2.7.1-9.1
libnettle
SUSE:Linux Enterprise Server for SAP Applications 12
 before 2.7.1-9.1
2.7.1-9.1
libnettle
SUSE:Linux Enterprise Server 12 SP1
 before 2.7.1-9.1
2.7.1-9.1
libnettle
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
 before 2.7.1-9.1
2.7.1-9.1
nettle
Ubuntu:14.04:LTS
 before 2.7.1-1ubuntu0.1, plus listed versions
2.7.1-1
2.7.1-1ubuntu0.1

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2015-8804 is a critical vulnerability (CVSS 9.8) in Nettle Project Nettle, published December 31, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.98%, the 90th percentile. Fixed in nettle 3.2-1.

References

Show 45 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open