{"id":"CVE-2021-20305","aliases":["ALPINE-CVE-2021-20305","BELL-CVE-2021-20305","DEBIAN-CVE-2021-20305","DLA-2760-1","DSA-4933-1","EUVD-2021-7730","GHSA-6xrq-2ww3-f6h5","JLSEC-2026-575","MGASA-2021-0300","OESA-2021-1177","RHSA-2021:1145","RHSA-2021:1206","RHSA-2021:1245","RHSA-2021:1246","RHSA-2021:2280","RHSA-2021:2356","RHSA-2021:2758","RHSA-2021:2760","RLSA-2021:1206","SUSE-SU-2021:1399-1","SUSE-SU-2021:1412-1","UBUNTU-CVE-2021-20305","USN-4906-1","openSUSE-SU-2021:0635-1","openSUSE-SU-2024:10962-1"],"status":"published","title":"A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification...","description":"A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions (GOST DSA, EDDSA \u0026 ECDSA) result in the Elliptic Curve Cryptography point (ECC) multiply function being called with out-of-range scalers, possibly resulting in incorrect results. This flaw allows an attacker to force an invalid signature, causing an assertion failure or possible validation. The highest threat to this vulnerability is to confidentiality, integrity, as well as system availability.","severity":{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.01674,"percentile":0.77179,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-327","CWE-787"],"published":"2021-04-05T21:31:06Z","modified":"2026-10-23T17:17:56Z","fixes":[{"ecosystem":"Alpine:v3.13","package":"nettle","fixed_in":["3.7.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"nettle","fixed_in":["3.7.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"nettle","fixed_in":["3.7.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"nettle","fixed_in":["3.7.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"nettle","fixed_in":["3.7.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"nettle","fixed_in":["3.7.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"nettle","fixed_in":["3.7.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"nettle","fixed_in":["3.7.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"nettle","fixed_in":["3.7.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"nettle","fixed_in":["3.7.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"nettle","fixed_in":["3.7.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"nettle","fixed_in":["3.7.2-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"nettle","fixed_in":["3.7.2-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"nettle","fixed_in":["3.7.2-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"nettle","fixed_in":["3.7.2-1"],"sources":["osv"]},{"ecosystem":"Julia","package":"Nettle_jll","fixed_in":["3.7.2+0"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"nettle","fixed_in":["3.6-2.oe1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"nettle","fixed_in":["0:2.7.1-9.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"nettle-debuginfo","fixed_in":["0:2.7.1-9.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"nettle-devel","fixed_in":["0:2.7.1-9.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nettle-debuginfo","fixed_in":["0:2.7.1-9.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nettle-devel","fixed_in":["0:2.7.1-9.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"nettle","fixed_in":["0:2.7.1-9.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"nettle-debuginfo","fixed_in":["0:2.7.1-9.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"nettle-devel","fixed_in":["0:2.7.1-9.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nettle","fixed_in":["0:2.7.1-9.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nettle-debuginfo","fixed_in":["0:2.7.1-9.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nettle-devel","fixed_in":["0:2.7.1-9.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-c++","fixed_in":["0:3.6.14-8.el8_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-c++-debuginfo","fixed_in":["0:3.6.14-8.el8_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-dane","fixed_in":["0:3.6.14-8.el8_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-dane-debuginfo","fixed_in":["0:3.6.14-8.el8_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-debuginfo","fixed_in":["0:3.6.14-8.el8_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-debugsource","fixed_in":["0:3.6.14-8.el8_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-devel","fixed_in":["0:3.6.14-8.el8_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-utils","fixed_in":["0:3.6.14-8.el8_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-utils-debuginfo","fixed_in":["0:3.6.14-8.el8_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nettle-debuginfo","fixed_in":["0:3.4.1-4.el8_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nettle-debugsource","fixed_in":["0:3.4.1-4.el8_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nettle-devel","fixed_in":["0:3.4.1-4.el8_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls","fixed_in":["0:3.6.14-8.el8_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-c++-debuginfo","fixed_in":["0:3.6.14-8.el8_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-dane-debuginfo","fixed_in":["0:3.6.14-8.el8_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-debuginfo","fixed_in":["0:3.6.14-8.el8_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-debugsource","fixed_in":["0:3.6.14-8.el8_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-utils-debuginfo","fixed_in":["0:3.6.14-8.el8_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"nettle","fixed_in":["0:3.4.1-4.el8_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"nettle-debuginfo","fixed_in":["0:3.4.1-4.el8_3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"nettle-debugsource","fixed_in":["0:3.4.1-4.el8_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"gnutls-c++","fixed_in":["0:3.6.8-10.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"gnutls-c++-debuginfo","fixed_in":["0:3.6.8-10.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"gnutls-dane","fixed_in":["0:3.6.8-10.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"gnutls-dane-debuginfo","fixed_in":["0:3.6.8-10.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"gnutls-debuginfo","fixed_in":["0:3.6.8-10.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"gnutls-debugsource","fixed_in":["0:3.6.8-10.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"gnutls-devel","fixed_in":["0:3.6.8-10.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"gnutls-utils","fixed_in":["0:3.6.8-10.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"gnutls-utils-debuginfo","fixed_in":["0:3.6.8-10.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"nettle-debuginfo","fixed_in":["0:3.4.1-2.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"nettle-debugsource","fixed_in":["0:3.4.1-2.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"nettle-devel","fixed_in":["0:3.4.1-2.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::baseos","package":"gnutls","fixed_in":["0:3.6.8-10.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::baseos","package":"gnutls-c++-debuginfo","fixed_in":["0:3.6.8-10.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::baseos","package":"gnutls-dane-debuginfo","fixed_in":["0:3.6.8-10.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::baseos","package":"gnutls-debuginfo","fixed_in":["0:3.6.8-10.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::baseos","package":"gnutls-debugsource","fixed_in":["0:3.6.8-10.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::baseos","package":"gnutls-utils-debuginfo","fixed_in":["0:3.6.8-10.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::baseos","package":"nettle","fixed_in":["0:3.4.1-2.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::baseos","package":"nettle-debuginfo","fixed_in":["0:3.4.1-2.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::baseos","package":"nettle-debugsource","fixed_in":["0:3.4.1-2.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"gnutls-c++","fixed_in":["0:3.6.8-12.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"gnutls-c++-debuginfo","fixed_in":["0:3.6.8-12.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"gnutls-dane","fixed_in":["0:3.6.8-12.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"gnutls-dane-debuginfo","fixed_in":["0:3.6.8-12.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"gnutls-debuginfo","fixed_in":["0:3.6.8-12.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"gnutls-debugsource","fixed_in":["0:3.6.8-12.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"gnutls-devel","fixed_in":["0:3.6.8-12.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"gnutls-utils","fixed_in":["0:3.6.8-12.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"gnutls-utils-debuginfo","fixed_in":["0:3.6.8-12.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"nettle-debuginfo","fixed_in":["0:3.4.1-2.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"nettle-debugsource","fixed_in":["0:3.4.1-2.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"nettle-devel","fixed_in":["0:3.4.1-2.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"gnutls","fixed_in":["0:3.6.8-12.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"gnutls-c++-debuginfo","fixed_in":["0:3.6.8-12.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"gnutls-dane-debuginfo","fixed_in":["0:3.6.8-12.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"gnutls-debuginfo","fixed_in":["0:3.6.8-12.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"gnutls-debugsource","fixed_in":["0:3.6.8-12.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"gnutls-utils-debuginfo","fixed_in":["0:3.6.8-12.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"nettle","fixed_in":["0:3.4.1-2.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"nettle-debuginfo","fixed_in":["0:3.4.1-2.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"nettle-debugsource","fixed_in":["0:3.4.1-2.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.7::computenode","package":"nettle","fixed_in":["0:2.7.1-9.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.7::computenode","package":"nettle-debuginfo","fixed_in":["0:2.7.1-9.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.7::computenode","package":"nettle-devel","fixed_in":["0:2.7.1-9.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.7::server","package":"nettle","fixed_in":["0:2.7.1-9.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.7::server","package":"nettle-debuginfo","fixed_in":["0:2.7.1-9.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.7::server","package":"nettle-devel","fixed_in":["0:2.7.1-9.el7_7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.6::server","package":"nettle","fixed_in":["0:2.7.1-9.el7_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.6::server","package":"nettle-debuginfo","fixed_in":["0:2.7.1-9.el7_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.6::server","package":"nettle-devel","fixed_in":["0:2.7.1-9.el7_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"nettle","fixed_in":["0:2.7.1-9.el7_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"nettle-debuginfo","fixed_in":["0:2.7.1-9.el7_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"nettle-devel","fixed_in":["0:2.7.1-9.el7_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.6::server","package":"nettle","fixed_in":["0:2.7.1-9.el7_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.6::server","package":"nettle-debuginfo","fixed_in":["0:2.7.1-9.el7_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.6::server","package":"nettle-devel","fixed_in":["0:2.7.1-9.el7_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.4::server","package":"nettle","fixed_in":["0:2.7.1-9.el7_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.4::server","package":"nettle-debuginfo","fixed_in":["0:2.7.1-9.el7_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.4::server","package":"nettle-devel","fixed_in":["0:2.7.1-9.el7_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.4::server","package":"nettle","fixed_in":["0:2.7.1-9.el7_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.4::server","package":"nettle-debuginfo","fixed_in":["0:2.7.1-9.el7_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.4::server","package":"nettle-devel","fixed_in":["0:2.7.1-9.el7_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.4::server","package":"nettle","fixed_in":["0:2.7.1-9.el7_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.4::server","package":"nettle-debuginfo","fixed_in":["0:2.7.1-9.el7_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.4::server","package":"nettle-devel","fixed_in":["0:2.7.1-9.el7_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.3::server","package":"nettle","fixed_in":["0:2.7.1-9.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.3::server","package":"nettle-debuginfo","fixed_in":["0:2.7.1-9.el7_3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.3::server","package":"nettle-devel","fixed_in":["0:2.7.1-9.el7_3"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"gnutls","fixed_in":["0:3.6.14-8.el8_3"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"nettle","fixed_in":["0:3.4.1-4.el8_4"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"libnettle","fixed_in":["2.7.1-13.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"libnettle","fixed_in":["2.7.1-13.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"libnettle","fixed_in":["2.7.1-13.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"libnettle","fixed_in":["2.7.1-13.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"libnettle","fixed_in":["2.7.1-13.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"libnettle","fixed_in":["2.7.1-13.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"libnettle","fixed_in":["2.7.1-13.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"libnettle","fixed_in":["2.7.1-13.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"libnettle","fixed_in":["2.7.1-13.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"libnettle","fixed_in":["2.7.1-13.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"libnettle","fixed_in":["2.7.1-13.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"libnettle","fixed_in":["2.7.1-13.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"libnettle","fixed_in":["2.7.1-13.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"libnettle","fixed_in":["2.7.1-13.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"libnettle","fixed_in":["3.4.1-4.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"libnettle","fixed_in":["3.4.1-4.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"libnettle","fixed_in":["3.4.1-4.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"libnettle","fixed_in":["3.4.1-4.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"libnettle","fixed_in":["3.4.1-4.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"libnettle","fixed_in":["3.4.1-4.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"libnettle","fixed_in":["3.4.1-4.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"libnettle","fixed_in":["3.4.1-4.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"libnettle","fixed_in":["3.4.1-4.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"libnettle","fixed_in":["3.4.1-4.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.0","package":"libnettle","fixed_in":["3.4.1-4.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Retail Branch Server 4.0","package":"libnettle","fixed_in":["3.4.1-4.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.0","package":"libnettle","fixed_in":["3.4.1-4.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.0","package":"libnettle","fixed_in":["3.4.1-4.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 6","package":"libnettle","fixed_in":["3.4.1-4.15.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"nettle","fixed_in":["3.2-1ubuntu0.16.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"nettle","fixed_in":["3.4-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"nettle","fixed_in":["3.5.1+really3.5.1-2ubuntu0.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"libnettle","fixed_in":["3.4.1-lp152.4.3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.13","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.2-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.2-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.2-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.2-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3-1+deb9u1"}]}],"versions":["3.3-1"],"bundled":2},{"source":"osv","ecosystem":"Debian:10","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-1+deb10u1"}]}],"versions":["3.4.1-1"],"bundled":2},{"source":"osv","ecosystem":"Julia","package":"Nettle_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.7.2+0"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-1.1.mga7"}]}],"bundled":2},{"source":"osv","ecosystem":"Mageia:8","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-1.mga8"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6-2.oe1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-9.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"nettle-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-9.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"nettle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-9.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nettle-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-9.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nettle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-9.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-9.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"nettle-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-9.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"nettle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-9.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-9.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nettle-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-9.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nettle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-9.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-8.el8_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-8.el8_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-8.el8_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-8.el8_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-8.el8_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-8.el8_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-8.el8_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-8.el8_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-8.el8_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nettle-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.1-4.el8_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nettle-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.1-4.el8_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nettle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.1-4.el8_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-8.el8_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-8.el8_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-8.el8_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-8.el8_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-8.el8_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-8.el8_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.1-4.el8_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"nettle-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.1-4.el8_3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"nettle-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.1-4.el8_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-10.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-10.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-10.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-10.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-10.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-10.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-10.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-10.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-10.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"nettle-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.1-2.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"nettle-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.1-2.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"nettle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.1-2.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::baseos","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-10.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::baseos","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-10.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::baseos","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-10.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::baseos","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-10.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::baseos","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-10.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::baseos","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-10.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::baseos","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.1-2.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::baseos","package":"nettle-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.1-2.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::baseos","package":"nettle-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.1-2.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-12.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-12.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-12.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-12.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-12.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-12.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-12.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-12.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-12.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"nettle-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.1-2.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"nettle-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.1-2.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"nettle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.1-2.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-12.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-12.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-12.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-12.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-12.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.8-12.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.1-2.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"nettle-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.1-2.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"nettle-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.1-2.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.7::computenode","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-9.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.7::computenode","package":"nettle-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-9.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.7::computenode","package":"nettle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-9.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.7::server","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-9.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.7::server","package":"nettle-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-9.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.7::server","package":"nettle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-9.el7_7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.6::server","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-9.el7_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.6::server","package":"nettle-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-9.el7_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.6::server","package":"nettle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-9.el7_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-9.el7_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"nettle-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-9.el7_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"nettle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-9.el7_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.6::server","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-9.el7_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.6::server","package":"nettle-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-9.el7_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.6::server","package":"nettle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-9.el7_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-9.el7_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"nettle-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-9.el7_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"nettle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-9.el7_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.4::server","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-9.el7_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.4::server","package":"nettle-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-9.el7_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.4::server","package":"nettle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-9.el7_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.4::server","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-9.el7_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.4::server","package":"nettle-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-9.el7_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.4::server","package":"nettle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-9.el7_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.3::server","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-9.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.3::server","package":"nettle-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-9.el7_3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.3::server","package":"nettle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-9.el7_3"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.14-8.el8_3"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.1-4.el8_4"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-13.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-13.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-13.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-13.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-13.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-13.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-13.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-13.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-13.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-13.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-13.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-13.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-13.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-13.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-4.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-4.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-4.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-4.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-4.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-4.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-4.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-4.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-4.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-4.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.0","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-4.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.0","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-4.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.0","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-4.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.0","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-4.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-4.15.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.7.1-1","2.7.1-1ubuntu0.1","2.7.1-1ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-1ubuntu0.16.04.2"}]}],"versions":["3.1.1-4","3.2-1","3.2-1ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4-1ubuntu0.1"}]}],"versions":["3.3-2","3.4-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.1+really3.5.1-2ubuntu0.1"}]}],"versions":["3.4.1-1","3.5.1+really3.5.1-2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-1ubuntu0.16.04.2"}]}],"versions":["3.1.1-4","3.2-1","3.2-1ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4-1ubuntu0.1"}]}],"versions":["3.3-2","3.4-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.1+really3.5.1-2ubuntu0.1"}]}],"versions":["3.4.1-1","3.5.1+really3.5.1-2"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-lp152.4.3.1"}]}]}],"products":[{"vendor":"[unknown]","product":"nettle"},{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"netapp","product":"active_iq_unified_manager"},{"vendor":"netapp","product":"ontap_select_deploy_administration_utility"},{"vendor":"nettle_project","product":"nettle"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1942533","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Patch","Third Party Advisory","fix","web","report"]},{"url":"https://security.gentoo.org/glsa/202105-31","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MQKWVVMAIDAJ7YAA3VVO32BHLDOH2E63/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://www.debian.org/security/2021/dsa-4933","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/09/msg00008.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://security.netapp.com/advisory/ntap-20211022-0002/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-20305","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MQKWVVMAIDAJ7YAA3VVO32BHLDOH2E63"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQKWVVMAIDAJ7YAA3VVO32BHLDOH2E63"},{"url":"https://security.netapp.com/advisory/ntap-20211022-0002"},{"url":"https://github.com/advisories/GHSA-6xrq-2ww3-f6h5"},{"url":"https://security.alpinelinux.org/vuln/CVE-2021-20305","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2021-20305","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-20305","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2021-0300.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=28800","tags":["report"]},{"url":"https://lists.lysator.liu.se/pipermail/nettle-bugs/2021/009458.html","tags":["web"]},{"url":"https://lists.lysator.liu.se/pipermail/nettle-bugs/2021/009545.html","tags":["web"]},{"url":"https://ubuntu.com/security/notices/USN-4906-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4990-1","tags":["advisory"]},{"url":"https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1177","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:1145","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1145.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-20305","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-20305","tags":["advisory","report"]},{"url":"https://lists.lysator.liu.se/pipermail/nettle-bugs/2021/009457.html","tags":["article","report"]},{"url":"https://access.redhat.com/errata/RHSA-2021:1206","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1206.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:1245","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1245.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:1246","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1246.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:2280","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2280.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:2356","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2356.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:2758","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2758.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:2760","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2760.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2021:1206","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20211399-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1183835","tags":["report"]},{"url":"https://bugzilla.suse.com/1184401","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20305","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20211412-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-20305","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JEQQBLTWQPDTYRTWQZSXENUU6TSCBJ5R/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16869","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3580","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2021-20305","description":"A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions (GOST DSA, EDDSA \u0026 ECDSA) result in the Elliptic Curve Cryptography point (ECC) multiply function being called with out-of-range scalers, possibly resulting in incorrect results. This flaw allows an attacker to force an invalid signature, causing an assertion failure or possible validation. The highest threat to this vulnerability is to confidentiality, integrity, as well as system availability.","status":"published","published":"2021-04-05T21:31:06Z","modified":"2026-10-14T10:04:15.674Z","cwes":["CWE-327"],"updated_at":"2026-11-02T14:32:55.564736Z"}],"euvd":[{"id":"EUVD-2021-7730","description":"A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions (GOST DSA, EDDSA \u0026 ECDSA) result in the Elliptic Curve Cryptography point (ECC) multiply function being called with out-of-range scalers, possibly resulting in incorrect results. This flaw allows an attacker to force an invalid signature, causing an assertion failure or possible validation. The highest threat to this vulnerability is to confidentiality, integrity, as well as system availability.","status":"published","published":"2021-04-05T21:31:06Z","modified":"2026-10-14T10:04:15Z","updated_at":"2026-11-02T17:27:16.85534Z"}],"ghsa":[{"id":"GHSA-6xrq-2ww3-f6h5","title":"A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification...","description":"A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions (GOST DSA, EDDSA \u0026 ECDSA) result in the Elliptic Curve Cryptography point (ECC) multiply function being called with out-of-range scalers, possibly resulting in incorrect results. This flaw allows an attacker to force an invalid signature, causing an assertion failure or possible validation. The highest threat to this vulnerability is to confidentiality, integrity, as well as system availability.","status":"published","published":"2022-05-24T17:46:36Z","modified":"2026-10-14T12:32:23Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-327","CWE-787"],"updated_at":"2026-11-02T15:13:24.812204Z"}],"nvd":[{"id":"CVE-2021-20305","description":"A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions (GOST DSA, EDDSA \u0026 ECDSA) result in the Elliptic Curve Cryptography point (ECC) multiply function being called with out-of-range scalers, possibly resulting in incorrect results. This flaw allows an attacker to force an invalid signature, causing an assertion failure or possible validation. The highest threat to this vulnerability is to confidentiality, integrity, as well as system availability.","status":"published","published":"2021-04-05T22:15:12.727Z","modified":"2026-10-14T11:16:51.937Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-327","CWE-787"],"updated_at":"2026-11-02T14:06:51.197859Z"}],"osv":[{"id":"ALPINE-CVE-2021-20305","description":"A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions (GOST DSA, EDDSA \u0026 ECDSA) result in the Elliptic Curve Cryptography point (ECC) multiply function being called with out-of-range scalers, possibly resulting in incorrect results. This flaw allows an attacker to force an invalid signature, causing an assertion failure or possible validation. The highest threat to this vulnerability is to confidentiality, integrity, as well as system availability.","status":"published","published":"2021-04-05T22:15:12.727Z","modified":"2026-10-23T17:17:56.146337836Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:48.646074Z"},{"id":"BELL-CVE-2021-20305","title":"CVE-2021-20305 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:16:33.655326Z","modified":"2026-01-26T09:49:35.100163Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:15.925958Z"},{"id":"CVE-2021-20305","description":"A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions (GOST DSA, EDDSA \u0026 ECDSA) result in the Elliptic Curve Cryptography point (ECC) multiply function being called with out-of-range scalers, possibly resulting in incorrect results. This flaw allows an attacker to force an invalid signature, causing an assertion failure or possible validation. The highest threat to this vulnerability is to confidentiality, integrity, as well as system availability.","status":"published","published":"2021-04-05T22:15:12.727Z","modified":"2026-04-16T04:30:19.845880378Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:18.004149Z"},{"id":"DEBIAN-CVE-2021-20305","description":"A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions (GOST DSA, EDDSA \u0026 ECDSA) result in the Elliptic Curve Cryptography point (ECC) multiply function being called with out-of-range scalers, possibly resulting in incorrect results. This flaw allows an attacker to force an invalid signature, causing an assertion failure or possible validation. The highest threat to this vulnerability is to confidentiality, integrity, as well as system availability.","status":"published","published":"2021-04-05T22:15:12.727Z","modified":"2026-10-15T09:47:32.786073102Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:34.637046Z"},{"id":"JLSEC-2026-575","description":"A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions (GOST DSA, EDDSA \u0026 ECDSA) result in the Elliptic Curve Cryptography point (ECC) multiply function being called with out-of-range scalers, possibly resulting in incorrect results. This flaw allows an attacker to force an invalid signature, causing an assertion failure or possible validation. The highest threat to this vulnerability is to confidentiality, integrity, as well as system availability.","status":"published","published":"2026-06-06T03:56:25.335Z","modified":"2026-07-18T00:00:14.76419299Z","cvss":[{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium"},{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:47:18.573531Z"},{"id":"OESA-2021-1177","title":"nettle security update","description":"Nettle is a cryptographic library designed to fit any context: in crypto toolkits for object-oriented languages, in applications like LSH or GnuPG, or even in kernel space.\r\n\r\nSecurity Fix(es):\r\n\r\nA flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions (GOST DSA, EDDSA \u0026amp; ECDSA) result in the Elliptic Curve Cryptography point (ECC) multiply function being called with out-of-range scalers, possibly resulting in incorrect results. This flaw allows an attacker to force an invalid signature, causing an assertion failure or possible validation. The highest threat to this vulnerability is to confidentiality, integrity, as well as system availability.(CVE-2021-20305)","status":"published","published":"2021-05-06T11:04:25Z","modified":"2026-08-18T01:15:34.10777701Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"RHSA-2021:1145","title":"Red Hat Security Advisory: nettle security update","status":"published","published":"2024-09-16T05:38:19Z","modified":"2026-08-07T10:02:30Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:1206","title":"Red Hat Security Advisory: gnutls and nettle security update","status":"published","published":"2024-09-16T05:38:26Z","modified":"2026-08-07T10:02:31Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:1245","title":"Red Hat Security Advisory: gnutls and nettle security update","status":"published","published":"2024-09-16T05:38:41Z","modified":"2026-08-07T10:02:33Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:1246","title":"Red Hat Security Advisory: gnutls and nettle security update","status":"published","published":"2024-09-16T05:38:33Z","modified":"2026-08-07T10:02:34Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:2280","title":"Red Hat Security Advisory: nettle security update","status":"published","published":"2024-09-16T05:38:48Z","modified":"2026-08-07T10:02:44Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:2356","title":"Red Hat Security Advisory: nettle security update","status":"published","published":"2024-09-16T05:38:56Z","modified":"2026-08-07T10:02:53Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:2758","title":"Red Hat Security Advisory: nettle security update","status":"published","published":"2024-09-16T05:39:02Z","modified":"2026-08-07T10:03:20Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:2760","title":"Red Hat Security Advisory: nettle security update","status":"published","published":"2024-09-16T05:39:09Z","modified":"2026-08-07T10:03:20Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RLSA-2021:1206","title":"Important: gnutls and nettle security update","description":"The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.\n\nNettle is a cryptographic library that is designed to fit easily in almost any context: In crypto toolkits for object-oriented languages, such as C++, Python, or Pike, in applications like LSH or GNUPG, or even in kernel space.\n\nSecurity Fix(es):\n\n* nettle: Out of bounds memory access in signature verification (CVE-2021-20305)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2021-04-14T20:07:45Z","modified":"2026-02-05T11:15:03.718617Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2021-20305","description":"A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions (GOST DSA, EDDSA \u0026 ECDSA) result in the Elliptic Curve Cryptography point (ECC) multiply function being called with out-of-range scalers, possibly resulting in incorrect results. This flaw allows an attacker to force an invalid signature, causing an assertion failure or possible validation. The highest threat to this vulnerability is to confidentiality, integrity, as well as system availability.","status":"published","published":"2021-04-05T22:15:00Z","modified":"2026-04-22T12:46:14.704749Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:26.29421Z"},{"id":"DLA-2760-1","title":"nettle - security update","status":"published","published":"2021-09-18T00:00:00Z","modified":"2026-03-09T01:20:04.077374Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DSA-4933-1","title":"nettle - security update","status":"published","published":"2021-06-18T00:00:00Z","modified":"2026-03-09T02:10:33.835788Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"MGASA-2021-0300","title":"Updated nettle packages fix security vulnerabilities","description":"Remote crash in RSA decryption via manipulated ciphertext (CVE-2021-3580).\n\nA flaw was found in Nettle in versions before 3.7.2, where several Nettle\nsignature verification functions (GOST DSA, EDDSA \u0026 ECDSA) result in the\nElliptic Curve Cryptography point (ECC) multiply function being called with\nout-of-range scalers, possibly resulting in incorrect results. This flaw\nallows an attacker to force an invalid signature, causing an assertion\nfailure or possible validation (CVE-2021-20305).\n\nThe Mageia 8 nettle package has been updated to version 3.7.3 and the Mageia 7\nnettle package has been patched to fix these issues.\n","status":"published","published":"2021-06-29T17:31:40Z","modified":"2026-04-16T04:43:28.495075206Z","updated_at":"2026-11-02T15:49:41.509337Z"},{"id":"openSUSE-SU-2021:0635-1","title":"Security update for libnettle","description":"This update for libnettle fixes the following issues:\n\n- CVE-2021-20305: Fixed the multiply function which was being called with out-of-range scalars (bsc#1184401).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2021-04-30T19:22:54Z","modified":"2025-05-07T18:12:23.047138Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"openSUSE-SU-2024:10962-1","title":"libhogweed6-3.7.3-1.2 on GA media","description":"These are all security issues fixed in the libhogweed6-3.7.3-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:17:18.56345Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2021:1399-1","title":"Security update for libnettle","description":"This update for libnettle fixes the following issues:\n\n- CVE-2021-20305: Fixed the multiply function which was being called with out-of-range scalars (bsc#1184401, bsc#1183835).\n","status":"published","published":"2021-04-28T07:26:03Z","modified":"2026-02-04T02:55:59.735775Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"SUSE-SU-2021:1412-1","title":"Security update for libnettle","description":"This update for libnettle fixes the following issues:\n\n- CVE-2021-20305: Fixed the multiply function which was being called with out-of-range scalars (bsc#1184401).\n","status":"published","published":"2021-04-28T15:10:26Z","modified":"2026-02-04T03:01:38.976417Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"USN-4906-1","title":"nettle vulnerability","description":"It was discovered that Nettle incorrectly handled signature verification.\nA remote attacker could use this issue to cause Nettle to crash, resulting\nin a denial of service, or possibly force invalid signatures.\n","status":"published","published":"2021-04-13T15:00:11Z","modified":"2026-04-27T15:51:29.404936Z","updated_at":"2026-11-02T16:58:15.159055Z"}]}}