Поиск уязвимостей
Количество 7
Количество 7
CVE-2022-46392
An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. An adversary with access to precise enough information about memory accesses (typically, an untrusted operating system attacking a secure enclave) can recover an RSA private key after observing the victim performing a single private-key operation, if the window size (MBEDTLS_MPI_WINDOW_SIZE) used for the exponentiation is 3 or smaller.
CVE-2022-46392
An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. An adversary with access to precise enough information about memory accesses (typically, an untrusted operating system attacking a secure enclave) can recover an RSA private key after observing the victim performing a single private-key operation, if the window size (MBEDTLS_MPI_WINDOW_SIZE) used for the exponentiation is 3 or smaller.
CVE-2022-46392
CVE-2022-46392
An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0 ...
GHSA-2cww-m3rc-2vgr
An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. An adversary with access to precise enough information about memory accesses (typically, an untrusted operating system attacking a secure enclave) can recover an RSA private key after observing the victim performing a single private-key operation, if the window size (MBEDTLS_MPI_WINDOW_SIZE) used for the exponentiation is 3 or smaller.
ALT-PU-2022-7788
ALT-PU-2022-7788: package `mbedtls-compat` update to version 2.28.2-alt1
ALT-PU-2021-2163
ALT-PU-2021-2163: package `mbedtls` update to version 3.0.0-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2022-46392 An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. An adversary with access to precise enough information about memory accesses (typically, an untrusted operating system attacking a secure enclave) can recover an RSA private key after observing the victim performing a single private-key operation, if the window size (MBEDTLS_MPI_WINDOW_SIZE) used for the exponentiation is 3 or smaller. | CVSS3: 5.3 | 1% Низкий | почти 4 года назад |
 | CVE-2022-46392 An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. An adversary with access to precise enough information about memory accesses (typically, an untrusted operating system attacking a secure enclave) can recover an RSA private key after observing the victim performing a single private-key operation, if the window size (MBEDTLS_MPI_WINDOW_SIZE) used for the exponentiation is 3 or smaller. | CVSS3: 5.3 | 1% Низкий | почти 4 года назад |
 | CVSS3: 5.3 | 1% Низкий | почти 4 года назад | |
| CVE-2022-46392 An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0 ... | CVSS3: 5.3 | 1% Низкий | почти 4 года назад |
| GHSA-2cww-m3rc-2vgr An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. An adversary with access to precise enough information about memory accesses (typically, an untrusted operating system attacking a secure enclave) can recover an RSA private key after observing the victim performing a single private-key operation, if the window size (MBEDTLS_MPI_WINDOW_SIZE) used for the exponentiation is 3 or smaller. | CVSS3: 5.3 | 1% Низкий | почти 4 года назад |
| ALT-PU-2022-7788 ALT-PU-2022-7788: package `mbedtls-compat` update to version 2.28.2-alt1 | CVSS3: 9.8 | почти 4 года назад | |
| ALT-PU-2021-2163 ALT-PU-2021-2163: package `mbedtls` update to version 3.0.0-alt1 | CVSS3: 9.8 | больше 5 лет назад |
Уязвимостей на страницу