Every CVE Search/ Get API key

CVE-2015-8805

The ecc_256_modq function in ecc-256.c in Nettle before 3.2 does not properly handle carry...

9.8 CriticalFix available

The ecc_256_modq function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-256 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors, a different vulnerability than CVE-2015-8803.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

2.81%Up 1.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 9.8

The ecc_256_modq function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-256 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors, a different vulnerability than CVE-2015-8803.

Record
CVE-2015-8805
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-310
Updated
2026-11-02
CVE List No score

The ecc_256_modq function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-256 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors, a different vulnerability than CVE-2015-8803.

Record
CVE-2015-8805
Updated
2026-11-02
EUVDEUVD-2015-8674 No score

The ecc_256_modq function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-256 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors, a different vulnerability than CVE-2015-8803.

Record
EUVD-2015-8674
Updated
2026-11-03
GitHub AdvisoriesGHSA-pfjj-937g-c323 9.8

The ecc_256_modq function in ecc-256.c in Nettle before 3.2 does not properly handle carry...

The ecc_256_modq function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-256 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors, a different vulnerability than CVE-2015-8803.

Record
GHSA-pfjj-937g-c323
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 9.8

The ecc_256_modq function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-256 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors, a different vulnerability than CVE-2015-8803.

Record
CVE-2015-8805
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2015-8805 9.8

The ecc_256_modq function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-256 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors, a different vulnerability than CVE-2015-8803.

Record
DEBIAN-CVE-2015-8805
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 6 moreShow less
OSVRHSA-2016:2582 7.4

Red Hat Security Advisory: nettle security and bug fix update

Record
RHSA-2016:2582
CVSS 3.0
7.4 HighCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2015-8805 9.8

The ecc_256_modq function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-256 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors, a different vulnerability than CVE-2015-8803.

Record
UBUNTU-CVE-2015-8805
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVMGASA-2016-0061 No score

Updated nettle packages fix security vulnerabilities

Updated nettle2.7 and nettle packages fix security vulnerabilities:

Two carry propagation bugs in elliptic curve scalar multiplications that affect the NIST P-256 curve. The bugs are in the C code and affect multiple architectures (CVE-2015-8803, CVE-2015-8805).

A carry propagation bug in elliptic curve scalar multiplications that affect the NIST P-384 curve. The bug is in the assembly code and only affects the x86_64 architecture (CVE-2015-8804).

Record
MGASA-2016-0061
Updated
2026-11-02
OSVopenSUSE-SU-2024:10339-1 No score

libhogweed4-3.3-1.1 on GA media

These are all security issues fixed in the libhogweed4-3.3-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10339-1
Updated
2026-11-02
OSVSUSE-SU-2016:0455-1 No score

Security update for libnettle

This update for libnettle fixes the following security issues:

  • CVE-2015-8803: Fixed miscomputation bugs in secp-256r1 modulo functions. (bsc#964845)
  • CVE-2015-8804: Fixed carry folding bug in x86_64 ecc_384_modp. (bsc#964847)
  • CVE-2015-8805: Fixed miscomputation bugs in secp-256r1 modulo functions. (bsc#964849)
Record
SUSE-SU-2016:0455-1
Updated
2026-11-02
OSVUSN-2897-1 No score

nettle vulnerabilities

Hanno Böck discovered that Nettle incorrectly handled carry propagation in the NIST P-256 elliptic curve. (CVE-2015-8803)

Hanno Böck discovered that Nettle incorrectly handled carry propagation in the NIST P-384 elliptic curve. (CVE-2015-8804)

Niels Moeller discovered that Nettle incorrectly handled carry propagation in the NIST P-256 elliptic curve. (CVE-2015-8805)

Record
USN-2897-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
nettle
Debian:12
 before 3.2-1
3.2-1
nettle
Debian:13
 before 3.2-1
3.2-1
nettle
Debian:14
 before 3.2-1
3.2-1
nettle2.7
Mageia:5
From an advisory covering 3 CVEs
 before 2.7.1-6.1.mga5
2.7.1-6.1.mga5
nettle
Mageia:5
From an advisory covering 3 CVEs
 before 3.0-3.1.mga5
3.0-3.1.mga5
nettle-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 4 CVEs
 before 0:2.7.1-8.el7
0:2.7.1-8.el7
nettle-devel
Red Hat:enterprise_linux:7::client
From an advisory covering 4 CVEs
 before 0:2.7.1-8.el7
0:2.7.1-8.el7
nettle
Red Hat:enterprise_linux:7::client
From an advisory covering 4 CVEs
 before 0:2.7.1-8.el7
0:2.7.1-8.el7
nettle-debuginfo
Red Hat:enterprise_linux:7::computenode
From an advisory covering 4 CVEs
 before 0:2.7.1-8.el7
0:2.7.1-8.el7
nettle-devel
Red Hat:enterprise_linux:7::computenode
From an advisory covering 4 CVEs
 before 0:2.7.1-8.el7
0:2.7.1-8.el7
Show 17 moreShow less
Affected packages
PackageAffectedFixed
nettle
Red Hat:enterprise_linux:7::computenode
From an advisory covering 4 CVEs
 before 0:2.7.1-8.el7
0:2.7.1-8.el7
nettle
Red Hat:enterprise_linux:7::server
From an advisory covering 4 CVEs
 before 0:2.7.1-8.el7
0:2.7.1-8.el7
nettle-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 4 CVEs
 before 0:2.7.1-8.el7
0:2.7.1-8.el7
nettle-devel
Red Hat:enterprise_linux:7::server
From an advisory covering 4 CVEs
 before 0:2.7.1-8.el7
0:2.7.1-8.el7
nettle
Red Hat:enterprise_linux:7::workstation
From an advisory covering 4 CVEs
 before 0:2.7.1-8.el7
0:2.7.1-8.el7
nettle-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 4 CVEs
 before 0:2.7.1-8.el7
0:2.7.1-8.el7
nettle-devel
Red Hat:enterprise_linux:7::workstation
From an advisory covering 4 CVEs
 before 0:2.7.1-8.el7
0:2.7.1-8.el7
libnettle
SUSE:Linux Enterprise Desktop 12
From an advisory covering 3 CVEs
 before 2.7.1-9.1
2.7.1-9.1
libnettle
SUSE:Linux Enterprise Desktop 12 SP1
From an advisory covering 3 CVEs
 before 2.7.1-9.1
2.7.1-9.1
libnettle
SUSE:Linux Enterprise Software Development Kit 12
From an advisory covering 3 CVEs
 before 2.7.1-9.1
2.7.1-9.1
libnettle
SUSE:Linux Enterprise Software Development Kit 12 SP1
From an advisory covering 3 CVEs
 before 2.7.1-9.1
2.7.1-9.1
libnettle
SUSE:Linux Enterprise Server 12
From an advisory covering 3 CVEs
 before 2.7.1-9.1
2.7.1-9.1
libnettle
SUSE:Linux Enterprise Server for SAP Applications 12
From an advisory covering 3 CVEs
 before 2.7.1-9.1
2.7.1-9.1
libnettle
SUSE:Linux Enterprise Server 12 SP1
From an advisory covering 3 CVEs
 before 2.7.1-9.1
2.7.1-9.1
libnettle
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
From an advisory covering 3 CVEs
 before 2.7.1-9.1
2.7.1-9.1
nettle
Ubuntu:14.04:LTS
 before 2.7.1-1ubuntu0.1, plus listed versions
2.7.1-1
2.7.1-1ubuntu0.1
nettle
Ubuntu:14.04:LTS
From an advisory covering 3 CVEs
 before 2.7.1-1ubuntu0.1, plus listed versions
2.7.1-1
2.7.1-1ubuntu0.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2015-8805 is a critical vulnerability (CVSS 9.8) in Nettle Project Nettle, published December 31, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.81%, the 86th percentile. Fixed in nettle 3.2-1.

References

Show 46 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open