Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2020-1192

Низкий

ALT-PU-2020-1192: package mbedtls update to version 2.16.4-alt1

Источник
errata.altlinux.org
Дата публикации
12.02.2020
Дата обновления
12.02.2020
Устраненные уязвимости
1
ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades mbedtls to version 2.16.4-alt1.

Устраненные уязвимости1

Ссылки1

ALT-PU-2020-1192https://errata.altlinux.org/ALT-PU-2020-1192

Связанные уязвимости

ubuntu логотип

CVE-2019-18222

CVSS3: 4.7
ubuntu
почти 7 лет назад

The ECDSA signature implementation in ecdsa.c in Arm Mbed Crypto 2.1 and Mbed TLS through 2.19.1 does not reduce the blinded scalar before computing the inverse, which allows a local attacker to recover the private key via side-channel attacks.

nvd логотип

CVE-2019-18222

CVSS3: 4.7
nvd
почти 7 лет назад

The ECDSA signature implementation in ecdsa.c in Arm Mbed Crypto 2.1 and Mbed TLS through 2.19.1 does not reduce the blinded scalar before computing the inverse, which allows a local attacker to recover the private key via side-channel attacks.

msrc логотип

CVE-2019-18222

msrc
около 1 года назад

The ECDSA signature implementation in ecdsa.c in Arm Mbed Crypto 2.1 and Mbed TLS through 2.19.1 does not reduce the blinded scalar before computing the inverse, which allows a local attacker to recover the private key via side-channel attacks.

debian логотип

CVE-2019-18222

CVSS3: 4.7
debian
почти 7 лет назад

The ECDSA signature implementation in ecdsa.c in Arm Mbed Crypto 2.1 a ...

github логотип

GHSA-fpgh-hvp5-cqc2

CVSS3: 4.7
github
больше 4 лет назад

The ECDSA signature implementation in ecdsa.c in Arm Mbed Crypto 2.1 and Mbed TLS through 2.19.1 does not reduce the blinded scalar before computing the inverse, which allows a local attacker to recover the private key via side-channel attacks.