CVE-2021-3580
A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext.
Published Aug 5, 2021 · updated Oct 14, 2026 · nettle project nettle
A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An attacker could use this flaw to provide a manipulated ciphertext leading to application crash and denial of service.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Aug 5, 2021 · NIST NVD
Detected
A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An attacker could use this flaw to provide a manipulated ciphertext leading to application crash and denial of service.
Oct 14, 2026 · NIST NVD
Updated
A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An attacker could use this flaw to provide a manipulated ciphertext leading to application crash and denial of service.
Affected
- cpe debian/debian linux9.0
- cpe netapp/ontap select deploy administration utilityversion unspecified
- cpe nettle project/nettleversion unspecified
- cpe redhat/enterprise linux7.0
- cpe redhat/enterprise linux8.0
Sources
- CVE.orgVulnerability recordCVE-2021-3580
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2021-3580
30-day exploitation probability 2.7%
first.org - NIST NVDVulnerability recordCVE-2021-3580
A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An attacker could use this flaw to provide a manipulated ciphertext leading to application crash and denial of service.
nvd.nist.gov