Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-16910

Опубликовано: 26 сент. 2019
Источник: nvd
CVSS3: 5.3
CVSS2: 2.6
EPSS Низкий

Описание

Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled, use an RNG with insufficient entropy for blinding, which might allow an attacker to recover a private key via side-channel attacks if a victim signs the same message many times. (For Mbed TLS, the fix is also available in versions 2.7.12 and 2.16.3.)

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:arm:mbed_crypto:*:*:*:*:*:*:*:*
Версия до 2.0.0 (исключая)
cpe:2.3:a:arm:mbed_tls:*:*:*:*:*:*:*:*
Версия до 2.7.12 (исключая)
cpe:2.3:a:arm:mbed_tls:*:*:*:*:*:*:*:*
Версия от 2.8.0 (включая) до 2.16.3 (исключая)
cpe:2.3:a:trustedfirmware:mbed_tls:*:*:*:*:*:*:*:*
Версия от 2.17.0 (включая) до 2.19.0 (исключая)
Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*
Конфигурация 3
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

EPSS

Процентиль: 78%
0.01759
Низкий

5.3 Medium

CVSS3

2.6 Low

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

ubuntu логотип

CVE-2019-16910

CVSS3: 5.3
ubuntu
около 7 лет назад

Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled, use an RNG with insufficient entropy for blinding, which might allow an attacker to recover a private key via side-channel attacks if a victim signs the same message many times. (For Mbed TLS, the fix is also available in versions 2.7.12 and 2.16.3.)

msrc логотип

CVE-2019-16910

msrc
3 месяца назад

Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled, use an RNG with insufficient entropy for blinding, which might allow an attacker to recover a private key via side-channel attacks if a victim signs the same message many times. (For Mbed TLS, the fix is also available in versions 2.7.12 and 2.16.3.)

debian логотип

CVE-2019-16910

CVSS3: 5.3
debian
около 7 лет назад

Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when dete ...

github логотип

GHSA-jg4p-c829-4q39

CVSS3: 5.3
github
больше 4 лет назад

Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled, use an RNG with insufficient entropy for blinding, which might allow an attacker to recover a private key via side-channel attacks if a victim signs the same message many times. (For Mbed TLS, the fix is also available in versions 2.7.12 and 2.16.3.)

altlinux логотип

ALT-PU-2019-3076

CVSS3: 5.3
altlinux
около 7 лет назад

ALT-PU-2019-3076: package `mbedtls` update to version 2.16.3-alt1

EPSS

Процентиль: 78%
0.01759
Низкий

5.3 Medium

CVSS3

2.6 Low

CVSS2

Дефекты

NVD-CWE-noinfo