CVE-2015-8803
The ecc_256_modp function in ecc-256.c in Nettle before 3.2 does not properly handle carry...
CVE-2015-8803 is a critical vulnerability (CVSS 9.8) in Nettle Project Nettle, published December 31, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.21%, the 90th percentile. Fixed in nettle 3.2-1.
The ecc_256_modp function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-256 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors, a different vulnerability than CVE-2015-8805.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
The ecc_256_modp function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-256 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors, a different vulnerability than CVE-2015-8805.
- Record
CVE-2015-8803- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-254, CWE-310
- Updated
- 2026-11-02
CVE List No score
The ecc_256_modp function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-256 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors, a different vulnerability than CVE-2015-8805.
- Record
CVE-2015-8803- Updated
- 2026-11-02
EUVDEUVD-2015-8672 No score
The ecc_256_modp function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-256 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors, a different vulnerability than CVE-2015-8805.
- Record
EUVD-2015-8672- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9224-822v-4vv3
The ecc_256_modp function in ecc-256.c in Nettle before 3.2 does not properly handle carry...
The ecc_256_modp function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-256 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors, a different vulnerability than CVE-2015-8805.
- Record
GHSA-9224-822v-4vv3- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSV
The ecc_256_modp function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-256 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors, a different vulnerability than CVE-2015-8805.
- Record
CVE-2015-8803- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2015-8803
The ecc_256_modp function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-256 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors, a different vulnerability than CVE-2015-8805.
- Record
DEBIAN-CVE-2015-8803- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 6 moreShow less
OSVRHSA-2016:2582
Red Hat Security Advisory: nettle security and bug fix update
- Record
RHSA-2016:2582- CVSS 3.0
- 7.4 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVUBUNTU-CVE-2015-8803
The ecc_256_modp function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-256 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors, a different vulnerability than CVE-2015-8805.
- Record
UBUNTU-CVE-2015-8803- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVMGASA-2016-0061 No score
Updated nettle packages fix security vulnerabilities
Updated nettle2.7 and nettle packages fix security vulnerabilities:
Two carry propagation bugs in elliptic curve scalar multiplications that affect the NIST P-256 curve. The bugs are in the C code and affect multiple architectures (CVE-2015-8803, CVE-2015-8805).
A carry propagation bug in elliptic curve scalar multiplications that affect the NIST P-384 curve. The bug is in the assembly code and only affects the x86_64 architecture (CVE-2015-8804).
- Record
MGASA-2016-0061- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10339-1 No score
libhogweed4-3.3-1.1 on GA media
These are all security issues fixed in the libhogweed4-3.3-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10339-1- Updated
- 2026-11-02
OSVSUSE-SU-2016:0455-1 No score
Security update for libnettle
This update for libnettle fixes the following security issues:
- CVE-2015-8803: Fixed miscomputation bugs in secp-256r1 modulo functions. (bsc#964845)
- CVE-2015-8804: Fixed carry folding bug in x86_64 ecc_384_modp. (bsc#964847)
- CVE-2015-8805: Fixed miscomputation bugs in secp-256r1 modulo functions. (bsc#964849)
- Record
SUSE-SU-2016:0455-1- Updated
- 2026-11-02
OSVUSN-2897-1 No score
nettle vulnerabilities
Hanno Böck discovered that Nettle incorrectly handled carry propagation in the NIST P-256 elliptic curve. (CVE-2015-8803)
Hanno Böck discovered that Nettle incorrectly handled carry propagation in the NIST P-384 elliptic curve. (CVE-2015-8804)
Niels Moeller discovered that Nettle incorrectly handled carry propagation in the NIST P-256 elliptic curve. (CVE-2015-8805)
- Record
USN-2897-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
nettleDebian:12 |
before 3.2-1 | 3.2-1 |
nettleDebian:13 |
before 3.2-1 | 3.2-1 |
nettleDebian:14 |
before 3.2-1 | 3.2-1 |
nettle2.7Mageia:5 |
before 2.7.1-6.1.mga5 | 2.7.1-6.1.mga5 |
nettleMageia:5 |
before 3.0-3.1.mga5 | 3.0-3.1.mga5 |
nettle-debuginfoRed Hat:enterprise_linux:7::client |
before 0:2.7.1-8.el7 | 0:2.7.1-8.el7 |
nettle-develRed Hat:enterprise_linux:7::client |
before 0:2.7.1-8.el7 | 0:2.7.1-8.el7 |
nettleRed Hat:enterprise_linux:7::client |
before 0:2.7.1-8.el7 | 0:2.7.1-8.el7 |
nettle-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:2.7.1-8.el7 | 0:2.7.1-8.el7 |
nettle-develRed Hat:enterprise_linux:7::computenode |
before 0:2.7.1-8.el7 | 0:2.7.1-8.el7 |
Show 16 moreShow less
| Package | Affected | Fixed |
|---|---|---|
nettleRed Hat:enterprise_linux:7::computenode |
before 0:2.7.1-8.el7 | 0:2.7.1-8.el7 |
nettleRed Hat:enterprise_linux:7::server |
before 0:2.7.1-8.el7 | 0:2.7.1-8.el7 |
nettle-debuginfoRed Hat:enterprise_linux:7::server |
before 0:2.7.1-8.el7 | 0:2.7.1-8.el7 |
nettle-develRed Hat:enterprise_linux:7::server |
before 0:2.7.1-8.el7 | 0:2.7.1-8.el7 |
nettleRed Hat:enterprise_linux:7::workstation |
before 0:2.7.1-8.el7 | 0:2.7.1-8.el7 |
nettle-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:2.7.1-8.el7 | 0:2.7.1-8.el7 |
nettle-develRed Hat:enterprise_linux:7::workstation |
before 0:2.7.1-8.el7 | 0:2.7.1-8.el7 |
libnettleSUSE:Linux Enterprise Desktop 12 |
before 2.7.1-9.1 | 2.7.1-9.1 |
libnettleSUSE:Linux Enterprise Desktop 12 SP1 |
before 2.7.1-9.1 | 2.7.1-9.1 |
libnettleSUSE:Linux Enterprise Software Development Kit 12 |
before 2.7.1-9.1 | 2.7.1-9.1 |
libnettleSUSE:Linux Enterprise Software Development Kit 12 SP1 |
before 2.7.1-9.1 | 2.7.1-9.1 |
libnettleSUSE:Linux Enterprise Server 12 |
before 2.7.1-9.1 | 2.7.1-9.1 |
libnettleSUSE:Linux Enterprise Server for SAP Applications 12 |
before 2.7.1-9.1 | 2.7.1-9.1 |
libnettleSUSE:Linux Enterprise Server 12 SP1 |
before 2.7.1-9.1 | 2.7.1-9.1 |
libnettleSUSE:Linux Enterprise Server for SAP Applications 12 SP1 |
before 2.7.1-9.1 | 2.7.1-9.1 |
nettleUbuntu:14.04:LTS |
before 2.7.1-1ubuntu0.1, plus listed versions 2.7.1-1 |
2.7.1-1ubuntu0.1 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
lists.opensuse.org/opensuse-updates/2016-02/msg00100.html
blog.fuzzing-project.org/38-Miscomputations-of-elliptic-curve-scalar-multiplications-in-Nettle.html
lists.lysator.liu.se/pipermail/nettle-bugs/2015/003028.html
lists.fedoraproject.org/pipermail/package-announce/2016-February/177473.html
git.lysator.liu.se/nettle/nettle/commit/c71d2c9d20eeebb985e3872e4550137209e3ce4d
Show 47 moreShow less
ubuntu.com/usn/USN-2897-1
openwall.com/lists/oss-security/2016/02/02/2
rhn.redhat.com/errata/RHSA-2016-2582.html
lists.gnu.org/archive/html/info-gnu/2016-01/msg00006.html
nvd.nist.gov/vuln/detail/CVE-2015-8803
github.com/advisories/GHSA-9224-822v-4vv3
security-tracker.debian.org/tracker/CVE-2015-8803
advisories.mageia.org/MGASA-2016-0061.html
bugs.mageia.org/show_bug.cgi?id=17669
access.redhat.com/errata/RHSA-2016:2582
bugzilla.redhat.com/show_bug.cgi?id=1252936
security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2582.json
cve.org/CVERecord?id=CVE-2015-8803
suse.com/support/update/announcement/2016/suse-su-20160455-1
bugzilla.suse.com/964845
ubuntu.com/security/CVE-2015-8803
seclists.org/oss-sec/2016/q1/273