← All advisories

Critical severity9.8NVD Advisory· Published Jun 25, 2023· Updated Jun 17, 2026

CVE-2023-36660

CVE-2023-36660

Description

The OCB feature in libnettle in Nettle 3.9 before 3.9.1 allows memory corruption.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Nettle Project/Nettle2 versions
cpe:2.3:a:nettle_project:nettle:3.9:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:nettle_project:nettle:3.9:*:*:*:*:*:*:*
- (no CPE)range: <3.9.1
Nettle/libnettledescription

Patches

Vulnerability mechanics

References

4

bugzilla.suse.com/show_bug.cginvdIssue TrackingPatch
git.lysator.liu.se/nettle/nettle/-/commit/867a4548b95705291a3afdd66d76e7f17ba2618fnvdPatch
git.lysator.liu.se/nettle/nettle/-/compare/nettle_3.9_release_20230514...nettle_3.9.1_release_20230601nvdPatch
security.gentoo.org/glsa/202401-24nvd

News mentions

0

No linked articles in our index yet.