CVE-2015-8805

Name	CVE-2015-8805
Description	The ecc_256_modq function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-256 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors, a different vulnerability than CVE-2015-8803.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs	813679

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
nettle (PTS)	bullseye	3.7.3-1	fixed
	bookworm	3.8.1-2	fixed
	forky, sid, trixie	3.10.1-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Debian Bugs
nettle	source	squeeze	(not affected)
nettle	source	wheezy	(not affected)
nettle	source	jessie	2.7.1-5+deb8u1
nettle	source	(unstable)	3.2-1	813679

Notes

[wheezy] - nettle <not-affected> (Vulnerable code not present)
[squeeze] - nettle <not-affected> (Vulnerable code not present)
https://git.lysator.liu.se/nettle/nettle/commit/c71d2c9d20eeebb985e3872e4550137209e3ce4d