CVE-2019-18222
23.01.2020, 17:15
The ECDSA signature implementation in ecdsa.c in Arm Mbed Crypto 2.1 and Mbed TLS through 2.19.1 does not reduce the blinded scalar before computing the inverse, which allows a local attacker to recover the private key via side-channel attacks.Enginsight
| Vendor | Product | Version |
|---|---|---|
| arm | mbed_crypto | 𝑥 < 3.0.0 |
| arm | mbed_tls | 𝑥 < 2.7.13 |
| arm | mbed_tls | 2.8.0 ≤ 𝑥 < 2.16.4 |
| arm | mbed_tls | 2.17.0 ≤ 𝑥 < 2.20.0 |
| debian | debian_linux | 10.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
References