Описание
The ECDSA signature implementation in ecdsa.c in Arm Mbed Crypto 2.1 and Mbed TLS through 2.19.1 does not reduce the blinded scalar before computing the inverse, which allows a local attacker to recover the private key via side-channel attacks.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needs-triage |
| devel | not-affected | 2.16.4-1ubuntu2 |
| eoan | ignored | end of life |
| esm-apps-legacy/xenial | needs-triage | |
| esm-apps/bionic | needs-triage | |
| esm-apps/focal | not-affected | 2.16.4-1ubuntu2 |
| esm-apps/jammy | not-affected | 2.16.4-1ubuntu2 |
| esm-apps/noble | not-affected | 2.16.4-1ubuntu2 |
| esm-apps/resolute | not-affected | 2.16.4-1ubuntu2 |
| esm-apps/xenial | ignored | end of ESM support, was needs-triage |
Показывать по
EPSS
1.9 Low
CVSS2
4.7 Medium
CVSS3
Связанные уязвимости
The ECDSA signature implementation in ecdsa.c in Arm Mbed Crypto 2.1 and Mbed TLS through 2.19.1 does not reduce the blinded scalar before computing the inverse, which allows a local attacker to recover the private key via side-channel attacks.
The ECDSA signature implementation in ecdsa.c in Arm Mbed Crypto 2.1 and Mbed TLS through 2.19.1 does not reduce the blinded scalar before computing the inverse, which allows a local attacker to recover the private key via side-channel attacks.
The ECDSA signature implementation in ecdsa.c in Arm Mbed Crypto 2.1 a ...
The ECDSA signature implementation in ecdsa.c in Arm Mbed Crypto 2.1 and Mbed TLS through 2.19.1 does not reduce the blinded scalar before computing the inverse, which allows a local attacker to recover the private key via side-channel attacks.
EPSS
1.9 Low
CVSS2
4.7 Medium
CVSS3