CVE-2023-36660

Summary

CVE-2023-36660 is a newly disclosed vulnerability affecting the OCB feature in libnettle, a cryptography library used in Nettle 3.9 and below. This flaw permits memory corruption, which could potentially be exploited by attackers to execute arbitrary code or cause a denial of service condition. Successful exploitation relies on the attacker having the ability to manipulate specially crafted input data, potentially through network traffic or locally executed applications. Users of Nettle are advised to update to version 3.9.1 or later to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.