CVE:CVE-2015-8803
CNNVD:CNNVD-201602-435
Nettle是一个基本的加密函数库。
Nettle 3.2之前版本的ecc-256.c文件中的‘ecc_256_modp’函数存在安全漏洞，该漏洞源于程序在实现P-256 NIST椭圆曲线时，没有正确处理进位传送。攻击者可利用该漏洞导致程序产生错误的输出。
solution:Upgrade nettle_project nettle to a higher version than 3.1.1,and avoid the version (,3.1.1]; Upgrade canonical ubuntu_linux to a higher version than 14.04,15.10,and avoid the version 14.04,15.10; Upgrade opensuse leap to a higher version than 42.1,and avoid the version 42.1; Upgrade opensuse opensuse to a higher version than 13.1,13.2,and avoid the version 13.1,13.2