CVE-2023-36660
The OCB feature in libnettle in Nettle 3.9 before 3.9.1 allows memory corruption.
Published Jun 25, 2023 · updated Oct 15, 2026 · nettle project nettle
The OCB feature in libnettle in Nettle 3.9 before 3.9.1 allows memory corruption.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Jun 25, 2023 · NIST NVD
Detected
The OCB feature in libnettle in Nettle 3.9 before 3.9.1 allows memory corruption.
Oct 15, 2026 · NIST NVD
Updated
The OCB feature in libnettle in Nettle 3.9 before 3.9.1 allows memory corruption.
Affected
- cpe nettle project/nettle3.9
Sources
- CVE.orgVulnerability recordCVE-2023-36660
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2023-36660
30-day exploitation probability 1.0%
first.org - NIST NVDVulnerability recordCVE-2023-36660
The OCB feature in libnettle in Nettle 3.9 before 3.9.1 allows memory corruption.
nvd.nist.gov