CVE:CVE-2021-20305
CNNVD:CNNVD-202104-132
Linux Nettle是Linux开源的一个应用软件。包含的设计适合很容易在许多情况下一个低级别的密码库。
Linux Nettle 中存在缓冲区错误漏洞。该漏洞源于椭圆曲线加密点 (ECC) 乘法函数被调用超出范围的缩放器。
solution:Upgrade nettle_project nettle to a higher version than 3.7.2,and avoid the version (,3.7.2); Upgrade fedoraproject fedora to a higher version than 33,and avoid the version 33; Upgrade redhat enterprise_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade netapp active_iq_unified_manager to a higher version than -; Upgrade netapp ontap_select_deploy_administration_utility to a higher version than -; Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0