CVE-2023-36660

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-36660
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-36660.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-36660
Downstream
Related
Published
2023-06-25T22:15:21.337Z
Modified
2026-04-10T05:01:23.090082Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

The OCB feature in libnettle in Nettle 3.9 before 3.9.1 allows memory corruption.

References

Affected packages

Git / git.lysator.liu.se/nettle/nettle

Affected ranges

Type
GIT
Repo
https://git.lysator.liu.se/nettle/nettle
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
d2cc9b95b50440c331ee143312309951a7e8d7ca
Database specific 
{
    "versions": [
        {
            "introduced": "3.9"
        },
        {
            "fixed": "3.9.1"
        }
    ]
}

Affected versions

Other
after_experimental_merge_20060516
before_experimental_branch_20050201
camellia_32bit_20100720
converted-master-branch-to-git
des_and_blowfish_compiles_19981216
head_before_experimental_merge_20060516
integrated_crypto_toolkit_19980903
moving_files_to_src_now
nettle_1.*
nettle_1.0_release_20010925
nettle_1.10_release_20040305
nettle_1.11_release_20041026
nettle_1.12_release_20041104
nettle_1.13_release_20051006
nettle_1.14_release_20051205
nettle_1.15_release_20061128
nettle_1.5_release_20020131
nettle_1.6_release_20021003
nettle_1.7_release_20030311
nettle_1.8_release_20040110
nettle_1.9_release_20040207
nettle_2.*
nettle_2.0_release_20090608
nettle_2.1_release_20100725
nettle_2.2_release_20110711
nettle_2.3_release_20110902
nettle_2.4_release_20110903
nettle_2.5_release_20120707
nettle_2.7_release_20130424
nettle_3.*
nettle_3.0_release_20140607
nettle_3.1.1_release_20150424
nettle_3.1_release_20150407
nettle_3.1rc1
nettle_3.1rc2
nettle_3.1rc3
nettle_3.2_release_20160128
nettle_3.3_release_20161001
nettle_3.4_release_20171119
nettle_3.4rc1
nettle_3.4rc2
nettle_3.5.1_release_20190627
nettle_3.5_release_20190626
nettle_3.5rc1
nettle_3.6_release_20200429
nettle_3.6rc1
nettle_3.6rc2
nettle_3.6rc3
nettle_3.7.1_release_20210217
nettle_3.7_release_20210104
nettle_3.7rc1
nettle_3.8_release_20220602
nettle_3.9_release_20230514
release_nettle_0.*
release_nettle_0.2.20010617

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-36660.json"
unresolved_ranges 
[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "3.9"
            }
        ]
    }
]