CVE-2016-6489
Fixed in a distro release EPSS 5%
The RSA and DSA decryption code in Nettle makes it easier for attackers to discover private keys via a cache side channel attack.
Products: redhat enterprise_linux_desktop, redhat enterprise_linux_hpc_node, redhat enterprise_linux_server, redhat enterprise_linux_workstation, canonical ubuntu_linux, nettle_project nettle
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | nettle | 3.3-1 |
| Debian 13 | nettle | 3.3-1 |
| Debian 14 | nettle | 3.3-1 |
| Debian 7 | nettle | 2.4-3+deb7u1 |
| Red Hat Enterprise Linux 7 | nettle | 0:2.7.1-8.el7 |
| Red Hat Enterprise Linux 7 | nettle-debuginfo | 0:2.7.1-8.el7 |
| Red Hat Enterprise Linux 7 | nettle-devel | 0:2.7.1-8.el7 |
| SUSE Linux Enterprise Desktop 12 SP2 | libnettle | 2.7.1-12.1 |
| SUSE Linux Enterprise Server 12 SP2 | libnettle | 2.7.1-12.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | libnettle | 2.7.1-12.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | libnettle | 2.7.1-12.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | libnettle | 2.7.1-12.1 |
| Ubuntu 14.04 LTS | nettle | 2.7.1-1ubuntu0.2 |
| Ubuntu 16.04 LTS | nettle | 3.2-1ubuntu0.16.04.1 |