{"id":"CVE-2021-3580","aliases":["ALPINE-CVE-2021-3580","ALSA-2021:4451","AZL-6741","BELL-CVE-2021-3580","CLSA-2026-1777451834","CLSA-2026-1777452099","CLSA-2026-1790604865","CLSA-2026-1791541027","DEBIAN-CVE-2021-3580","DLA-2760-1","DSA-4933-1","EUVD-2021-26889","GHSA-52fp-4722-wcjw","JLSEC-2026-576","MGASA-2021-0300","OESA-2021-1320","RHSA-2021:4451","RLSA-2021:4451","SUSE-SU-2021:2135-1","SUSE-SU-2021:2143-1","UBUNTU-CVE-2021-3580","USN-4990-1","openSUSE-SU-2021:0906-1","openSUSE-SU-2021:2143-1","openSUSE-SU-2024:10962-1"],"status":"published","title":"A flaw was found in the way nettle's RSA decryption functions handled specially crafted...","description":"A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An attacker could use this flaw to provide a manipulated ciphertext leading to application crash and denial of service.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.02708,"percentile":0.86073,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20"],"published":"2021-06-10T00:00:00Z","modified":"2026-10-29T11:01:41Z","fixes":[{"ecosystem":"Alpine:v3.12","package":"nettle","fixed_in":["3.5.1-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"nettle","fixed_in":["3.7.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"nettle","fixed_in":["3.7.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"nettle","fixed_in":["3.7.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"nettle","fixed_in":["3.7.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"nettle","fixed_in":["3.7.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"nettle","fixed_in":["3.7.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"nettle","fixed_in":["3.7.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"nettle","fixed_in":["3.7.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"nettle","fixed_in":["3.7.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"nettle","fixed_in":["3.7.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"nettle","fixed_in":["3.7.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"nettle","fixed_in":["3.7.3-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"nettle","fixed_in":["3.7.3-1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"nettle","fixed_in":["2.7.1-9.el7_9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"nettle-devel","fixed_in":["2.7.1-9.el7_9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"nettle","fixed_in":["2.7.1-9.el7_9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"nettle-devel","fixed_in":["2.7.1-9.el7_9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"nettle","fixed_in":["2.7.1-9.el7_9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"nettle-devel","fixed_in":["2.7.1-9.el7_9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"nettle","fixed_in":["3.7.3-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"nettle","fixed_in":["3.7.3-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"nettle","fixed_in":["3.7.3-1"],"sources":["osv"]},{"ecosystem":"Julia","package":"Nettle_jll","fixed_in":["3.9.1+0"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"nettle","fixed_in":["3.6-3.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP2","package":"nettle","fixed_in":["3.6-3.oe1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"libnettle","fixed_in":["2.7.1-13.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"libnettle","fixed_in":["2.7.1-13.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"libnettle","fixed_in":["2.7.1-13.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"libnettle","fixed_in":["2.7.1-13.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"libnettle","fixed_in":["2.7.1-13.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"libnettle","fixed_in":["2.7.1-13.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"libnettle","fixed_in":["2.7.1-13.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"libnettle","fixed_in":["2.7.1-13.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"libnettle","fixed_in":["2.7.1-13.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"libnettle","fixed_in":["2.7.1-13.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"libnettle","fixed_in":["2.7.1-13.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"libnettle","fixed_in":["2.7.1-13.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"libnettle","fixed_in":["2.7.1-13.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"libnettle","fixed_in":["2.7.1-13.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"libnettle","fixed_in":["3.4.1-4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"libnettle","fixed_in":["3.4.1-4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"libnettle","fixed_in":["3.4.1-4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"libnettle","fixed_in":["3.4.1-4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"libnettle","fixed_in":["3.4.1-4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"libnettle","fixed_in":["3.4.1-4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"libnettle","fixed_in":["3.4.1-4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"libnettle","fixed_in":["3.4.1-4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"libnettle","fixed_in":["3.4.1-4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"libnettle","fixed_in":["3.4.1-4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"libnettle","fixed_in":["3.4.1-4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.0","package":"libnettle","fixed_in":["3.4.1-4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Retail Branch Server 4.0","package":"libnettle","fixed_in":["3.4.1-4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.0","package":"libnettle","fixed_in":["3.4.1-4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.0","package":"libnettle","fixed_in":["3.4.1-4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 6","package":"libnettle","fixed_in":["3.4.1-4.18.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"nettle","fixed_in":["3.4.1-0ubuntu0.18.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"nettle","fixed_in":["3.5.1+really3.5.1-2ubuntu0.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"libnettle","fixed_in":["3.4.1-lp152.4.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"libnettle","fixed_in":["3.4.1-4.18.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.12","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.1-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-4.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-4.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-4.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-4.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.16-4.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-7.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"nettle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-7.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Azure Linux:2","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-9.el7_9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"nettle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-9.el7_9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-9.el7_9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"nettle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-9.el7_9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-9.el7_9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"nettle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-9.el7_9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libhogweed4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-1ubuntu0.16.04.2+tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libnettle6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-1ubuntu0.16.04.2+tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"nettle-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-1ubuntu0.16.04.2+tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"nettle-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-1ubuntu0.16.04.2+tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3-1+deb9u1"}]}],"versions":["3.3-1"],"bundled":2},{"source":"osv","ecosystem":"Debian:10","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-1+deb10u1"}]}],"versions":["3.4.1-1"],"bundled":2},{"source":"osv","ecosystem":"Julia","package":"Nettle_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.9.1+0"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-1.1.mga7"}]}],"bundled":2},{"source":"osv","ecosystem":"Mageia:8","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.3-1.mga8"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6-3.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP2","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6-3.oe1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-4.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-4.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-4.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-4.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-4.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-4.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-4.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-4.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-4.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nettle-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.1-7.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nettle-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.1-7.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"nettle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.1-7.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-4.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-c++-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-4.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-dane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-4.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-4.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-4.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"gnutls-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-4.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.1-7.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"nettle-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.1-7.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"nettle-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.1-7.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.16-4.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.1-7.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-13.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-13.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-13.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-13.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-13.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-13.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-13.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-13.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-13.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-13.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-13.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-13.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-13.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-13.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.0","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.0","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.0","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.0","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-4.18.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.7.1-1","2.7.1-1ubuntu0.1","2.7.1-1ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.1-4","3.2-1","3.2-1ubuntu0.16.04.1","3.2-1ubuntu0.16.04.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-0ubuntu0.18.04.1"}]}],"versions":["3.3-2","3.4-1","3.4-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.1+really3.5.1-2ubuntu0.2"}]}],"versions":["3.4.1-1","3.5.1+really3.5.1-2","3.5.1+really3.5.1-2ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-0ubuntu0.18.04.1"}]}],"versions":["3.3-2","3.4-1","3.4-1ubuntu0.1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"nettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.1+really3.5.1-2ubuntu0.2"}]}],"versions":["3.4.1-1","3.5.1+really3.5.1-2","3.5.1+really3.5.1-2ubuntu0.1"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-lp152.4.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"libnettle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-4.18.1"}]}]}],"products":[{"vendor":"[unknown]","product":"nettle"},{"vendor":"debian","product":"debian_linux"},{"vendor":"netapp","product":"ontap_select_deploy_administration_utility"},{"vendor":"nettle_project","product":"nettle"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1967983","tags":["x_transferred","Issue Tracking","Patch","Third Party Advisory","fix","web","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/09/msg00008.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://security.netapp.com/advisory/ntap-20211104-0006/","tags":["x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://security.gentoo.org/glsa/202401-24","tags":["vendor-advisory","x_transferred","advisory","web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3580","tags":["web","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20211104-0006"},{"url":"https://github.com/advisories/GHSA-52fp-4722-wcjw"},{"url":"https://security.alpinelinux.org/vuln/CVE-2021-3580","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:4451","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/1776250","tags":["report"]},{"url":"https://bugzilla.redhat.com/1908110","tags":["report"]},{"url":"https://bugzilla.redhat.com/1908334","tags":["report"]},{"url":"https://bugzilla.redhat.com/1922275","tags":["report"]},{"url":"https://bugzilla.redhat.com/1922276","tags":["report"]},{"url":"https://bugzilla.redhat.com/1965445","tags":["report"]},{"url":"https://bugzilla.redhat.com/1967983","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2021-4451.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2021-20231","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-20232","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-3580","tags":["report"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2021-3580","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1777451834.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1777452099.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1790604865.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2026-1791541027.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16869","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-3580","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2021-0300.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=28800","tags":["report"]},{"url":"https://lists.lysator.liu.se/pipermail/nettle-bugs/2021/009458.html","tags":["web"]},{"url":"https://lists.lysator.liu.se/pipermail/nettle-bugs/2021/009545.html","tags":["web"]},{"url":"https://ubuntu.com/security/notices/USN-4906-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4990-1","tags":["advisory"]},{"url":"https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1320","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.5_release_notes/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1776250","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1908110","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1908334","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1922275","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1922276","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1965445","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4451.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3580","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3580","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-20231","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-20231","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-20231","tags":["advisory"]},{"url":"https://gitlab.com/gnutls/gnutls/-/issues/1151","tags":["article"]},{"url":"https://www.gnutls.org/security-new.html#GNUTLS-SA-2021-03-10","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-20232","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-20232","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-20232","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2021:4451","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20212135-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1187060","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3580","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20212143-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-3580","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-16869","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/D4XGPKTRWLOEATNJNZGQZCO6BZTKIKJ6/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OZAR7UXBYGOSW57CMLBEWIM7KTCVMXFZ/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16869","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20305","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2021-3580","description":"A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An attacker could use this flaw to provide a manipulated ciphertext leading to application crash and denial of service.","status":"published","published":"2021-08-05T00:00:00Z","modified":"2026-10-14T09:49:47.666Z","cwes":["CWE-20"],"updated_at":"2026-11-02T14:33:04.020035Z"}],"euvd":[{"id":"EUVD-2021-26889","description":"A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An attacker could use this flaw to provide a manipulated ciphertext leading to application crash and denial of service.","status":"published","published":"2021-08-05T00:00:00Z","modified":"2026-10-14T09:49:47Z","updated_at":"2026-11-02T17:27:16.85534Z"}],"ghsa":[{"id":"GHSA-52fp-4722-wcjw","title":"A flaw was found in the way nettle's RSA decryption functions handled specially crafted...","description":"A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An attacker could use this flaw to provide a manipulated ciphertext leading to application crash and denial of service.","status":"published","published":"2022-05-24T19:10:03Z","modified":"2026-10-14T12:32:28Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T15:13:24.812204Z"}],"nvd":[{"id":"CVE-2021-3580","description":"A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An attacker could use this flaw to provide a manipulated ciphertext leading to application crash and denial of service.","status":"published","published":"2021-08-05T21:15:12.853Z","modified":"2026-10-14T10:17:45.713Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:06:56.562207Z"}],"osv":[{"id":"ALPINE-CVE-2021-3580","description":"A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An attacker could use this flaw to provide a manipulated ciphertext leading to application crash and denial of service.","status":"published","published":"2021-08-05T21:15:12.853Z","modified":"2026-10-23T17:17:56.198208875Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:48.646074Z"},{"id":"AZL-6741","title":"CVE-2021-3580 affecting package nettle for versions less than 3.7.3-1","description":"A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An attacker could use this flaw to provide a manipulated ciphertext leading to application crash and denial of service.","status":"published","published":"2021-08-05T21:15:12Z","modified":"2026-04-21T04:38:09.568858Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:08.630357Z"},{"id":"BELL-CVE-2021-3580","title":"CVE-2021-3580 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:14:07.592534Z","modified":"2026-01-26T09:45:53.240117Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:16.5265Z"},{"id":"CVE-2021-3580","description":"A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An attacker could use this flaw to provide a manipulated ciphertext leading to application crash and denial of service.","status":"published","published":"2021-08-05T21:15:12.853Z","modified":"2026-04-16T04:31:55.461066213Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:20.13324Z"},{"id":"DEBIAN-CVE-2021-3580","description":"A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An attacker could use this flaw to provide a manipulated ciphertext leading to application crash and denial of service.","status":"published","published":"2021-08-05T21:15:12.853Z","modified":"2026-10-15T09:47:37.015495143Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:35.233346Z"},{"id":"JLSEC-2026-576","description":"A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An attacker could use this flaw to provide a manipulated ciphertext leading to application crash and denial of service.","status":"published","published":"2026-06-06T03:56:25.335Z","modified":"2026-07-18T00:02:11.04062611Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:47:18.573531Z"},{"id":"OESA-2021-1320","title":"nettle security update","description":"Nettle is a cryptographic library designed to fit any context in crypto toolkits for object-oriented languages, in applications like LSH or GnuPG, or even in kernel space.\r\n\r\nSecurity Fix(es):\r\n\r\nA flaw was found in the way nettle\u0026apos;s RSA decryption functions handled specially crafted ciphertext. An attacker could use this flaw to provide a manipulated ciphertext leading to application crash and denial of service.(CVE-2021-3580)","status":"published","published":"2021-08-20T11:04:33Z","modified":"2026-08-18T01:15:37.337108157Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"RHSA-2021:4451","title":"Red Hat Security Advisory: gnutls and nettle security, bug fix, and enhancement update","status":"published","published":"2024-09-16T06:06:07Z","modified":"2026-10-15T10:02:10Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RLSA-2021:4451","title":"Moderate: gnutls and nettle security, bug fix, and enhancement update","description":"The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.\n\nNettle is a cryptographic library that is designed to fit easily in almost any context: In crypto toolkits for object-oriented languages, such as C++, Python, or Pike, in applications like LSH or GNUPG, or even in kernel space.\n\nThe following packages have been upgraded to a later upstream version: gnutls (3.6.16). (BZ#1956783)\n\nSecurity Fix(es):\n\n* nettle: Remote crash in RSA decryption via manipulated ciphertext (CVE-2021-3580)\n\n* gnutls: Use after free in client key_share extension (CVE-2021-20231)\n\n* gnutls: Use after free in client_send_params in lib/ext/pre_shared_key.c (CVE-2021-20232)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.5 Release Notes linked from the References section.","status":"published","published":"2021-11-09T09:23:20Z","modified":"2026-02-05T09:30:13.738898Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2021-3580","description":"A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An attacker could use this flaw to provide a manipulated ciphertext leading to application crash and denial of service.","status":"published","published":"2021-06-10T00:00:00Z","modified":"2026-04-22T12:57:07.081242Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:27.870979Z"},{"id":"ALSA-2021:4451","title":"Moderate: gnutls and nettle security, bug fix, and enhancement update","description":"The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.\n\nNettle is a cryptographic library that is designed to fit easily in almost any context: In crypto toolkits for object-oriented languages, such as C++, Python, or Pike, in applications like LSH or GNUPG, or even in kernel space.\n\nThe following packages have been upgraded to a later upstream version: gnutls (3.6.16). (BZ#1956783)\n\nSecurity Fix(es):\n\n* nettle: Remote crash in RSA decryption via manipulated ciphertext (CVE-2021-3580)\n\n* gnutls: Use after free in client key_share extension (CVE-2021-20231)\n\n* gnutls: Use after free in client_send_params in lib/ext/pre_shared_key.c (CVE-2021-20232)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2021-11-09T09:23:20Z","modified":"2026-10-29T11:01:41.879921194Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"CLSA-2026-1777451834","title":"nettle: Fix of CVE-2021-3580","description":"- CVE-2021-3580: add input validation to RSA decrypt family and length check to _pkcs1_sec_decrypt","status":"published","published":"2026-04-29T08:37:18Z","modified":"2026-06-01T00:33:27.252632105Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"CLSA-2026-1777452099","title":"nettle: Fix of CVE-2021-3580","description":"- CVE-2021-3580: add input validation to RSA decrypt family and length check to _pkcs1_sec_decrypt","status":"published","published":"2026-04-29T08:41:44Z","modified":"2026-06-01T00:33:20.175377857Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"CLSA-2026-1790604865","title":"nettle: Fix of CVE-2021-3580","description":"- CVE-2021-3580: add input validation to RSA decrypt family and length check to _pkcs1_sec_decrypt","status":"published","published":"2026-09-30T16:39:26Z","modified":"2026-10-26T09:31:49.416739905Z","updated_at":"2026-11-02T15:43:48.65893Z"},{"id":"CLSA-2026-1791541027","title":"Fix CVE(s): CVE-2018-16869","description":"   * SECURITY UPDATE: Bleichenbacher-type side-channel in RSA decryption\n     - debian/patches/CVE-2018-16869-1.patch: add side-channel silent\n       memeql_sec and cnd_memcpy in memeql-sec.c, cnd-memcpy.c, memops.h,\n       ccm.c, examples/rsa-decrypt.c, Makefile.in, testsuite.\n     - debian/patches/CVE-2018-16869-2.patch: add side-channel silent RSA\n       root function _rsa_sec_compute_root and mpn_get_base256 in\n       rsa-sec-compute-root.c, rsa-internal.h, gmp-glue.c, gmp-glue.h,\n       Makefile.in.\n     - debian/patches/CVE-2018-16869-3.patch: add side-channel silent\n       PKCS#1 decoding _pkcs1_sec_decrypt in pkcs1-sec-decrypt.c,\n       rsa-internal.h, Makefile.in, testsuite.\n     - debian/patches/CVE-2018-16869-4.patch: add rsa_sec_decrypt and use\n       the side-channel silent root in rsa_compute_root_tr and\n       rsa_compute_root, and reject bad private keys early, in\n       rsa-sec-decrypt.c, rsa-sign-tr.c, rsa-sign.c,\n       rsa-sec-compute-root.c, rsa.h, Makefile.in, testsuite.\n     - debian/patches/CVE-2018-16869-5.patch: require input in range and of\n       fixed size in rsa_sec_decrypt, rsa_decrypt_tr, rsa_decrypt and\n       rsa_sec_compute_root_tr, and check the message length in\n       _pkcs1_sec_decrypt, in pkcs1-sec-decrypt.c, rsa-decrypt-tr.c,\n       rsa-decrypt.c, rsa-sec-decrypt.c, rsa-sign-tr.c, rsa.h, testsuite.\n     - debian/patches/CVE-2018-16869-6.patch: strip the PKCS#1 padding in\n       rsa_decrypt and rsa_decrypt_tr with the side-channel silent\n       _pkcs1_sec_decrypt_variable, in pkcs1-sec-decrypt.c,\n       pkcs1-decrypt.c, rsa-decrypt-tr.c, rsa-internal.h, testsuite.\n     - debian/libhogweed4.symbols, debian/libnettle6.symbols: added new\n       symbols.\n     - CVE-2018-16869\n     - CVE-2021-3580 (the input range checks in CVE-2018-16869-5.patch)","status":"published","published":"2026-10-09T10:17:18Z","modified":"2026-10-26T09:32:02.514686342Z","updated_at":"2026-11-02T15:43:50.599064Z"},{"id":"DLA-2760-1","title":"nettle - security update","status":"published","published":"2021-09-18T00:00:00Z","modified":"2026-03-09T01:20:04.077374Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DSA-4933-1","title":"nettle - security update","status":"published","published":"2021-06-18T00:00:00Z","modified":"2026-03-09T02:10:33.835788Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"MGASA-2021-0300","title":"Updated nettle packages fix security vulnerabilities","description":"Remote crash in RSA decryption via manipulated ciphertext (CVE-2021-3580).\n\nA flaw was found in Nettle in versions before 3.7.2, where several Nettle\nsignature verification functions (GOST DSA, EDDSA \u0026 ECDSA) result in the\nElliptic Curve Cryptography point (ECC) multiply function being called with\nout-of-range scalers, possibly resulting in incorrect results. This flaw\nallows an attacker to force an invalid signature, causing an assertion\nfailure or possible validation (CVE-2021-20305).\n\nThe Mageia 8 nettle package has been updated to version 3.7.3 and the Mageia 7\nnettle package has been patched to fix these issues.\n","status":"published","published":"2021-06-29T17:31:40Z","modified":"2026-04-16T04:43:28.495075206Z","updated_at":"2026-11-02T15:49:41.509337Z"},{"id":"openSUSE-SU-2021:0906-1","title":"Security update for libnettle","description":"This update for libnettle fixes the following issues:\n\n- CVE-2021-3580: Fixed a remote denial of service in the RSA decryption via manipulated ciphertext (bsc#1187060).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2021-06-24T09:52:27Z","modified":"2026-02-04T02:29:12.440476Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"openSUSE-SU-2021:2143-1","title":"Security update for libnettle","description":"This update for libnettle fixes the following issues:\n\n- CVE-2021-3580: Fixed a remote denial of service in the RSA decryption via manipulated ciphertext (bsc#1187060).\n","status":"published","published":"2021-07-11T08:40:53Z","modified":"2026-02-04T04:05:03.847568Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2024:10962-1","title":"libhogweed6-3.7.3-1.2 on GA media","description":"These are all security issues fixed in the libhogweed6-3.7.3-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:17:18.56345Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2021:2135-1","title":"Security update for libnettle","description":"This update for libnettle fixes the following issues:\n\n- CVE-2021-3580: Fixed a remote denial of service in the RSA decryption via manipulated ciphertext (bsc#1187060).\n","status":"published","published":"2021-06-23T11:39:35Z","modified":"2026-02-04T04:09:58.00003Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"SUSE-SU-2021:2143-1","title":"Security update for libnettle","description":"This update for libnettle fixes the following issues:\n\n- CVE-2021-3580: Fixed a remote denial of service in the RSA decryption via manipulated ciphertext (bsc#1187060).\n","status":"published","published":"2021-06-23T14:27:54Z","modified":"2026-02-04T03:02:24.281685Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"USN-4990-1","title":"nettle vulnerabilities","description":"It was discovered that Nettle incorrectly handled RSA decryption. A remote\nattacker could possibly use this issue to cause Nettle to crash, resulting\nin a denial of service. (CVE-2021-3580)\n\nIt was discovered that Nettle incorrectly handled certain padding oracles.\nA remote attacker could possibly use this issue to perform a variant of the\nBleichenbacher attack. This issue only affected Ubuntu 18.04 LTS.\n(CVE-2018-16869)\n","status":"published","published":"2021-06-17T11:01:57Z","modified":"2026-04-22T10:15:40.013204Z","updated_at":"2026-11-02T16:58:15.159055Z"}]}}