CVE-2019-18222

🗓️ 23 Jan 2020 00:00:00Reported by mitreType

The ECDSA signature implementation in Arm Mbed Crypto 2.1 and Mbed TLS through 2.19.1 does not reduce the blinded scalar before computing the inverse, allowing a local attacker to recover the private key via side-channel attacks

Reporter	Title	Published	Views	Family All 47
AlpineLinux	CVE-2019-18222	23 Jan 202000:00	–	alpinelinux
ArchLinux	[ASA-202003-7] mbedtls: private key recovery	11 Mar 202000:00	–	archlinux
AstraLinux	Astra Linux - уязвимость в mbedtls	20 May 202605:53	–	astralinux
FreeBSD	Mbed TLS -- Side channel attack on ECDSA	25 Oct 201900:00	–	freebsd
Cvelist	CVE-2019-18222	23 Jan 202000:00	–	cvelist
Debian	[SECURITY] [DLA 3249-1] mbedtls security update	25 Dec 202223:33	–	debian
Debian CVE	CVE-2019-18222	23 Jan 202000:00	–	debiancve
Tenable Nessus	Debian dla-3249 : libmbedcrypto3 - security update	26 Dec 202200:00	–	nessus
Tenable Nessus	Fedora 31 : mbedtls (2020-5bcfae9f46)	19 Feb 202000:00	–	nessus
Tenable Nessus	Fedora 30 : mbedtls (2020-8d3ea0fe8d)	19 Feb 202000:00	–	nessus

NVD

Node

arm mbed_cryptoRange<3.0.0

arm mbed_tlsRange<2.7.13

arm mbed_tlsRange2.8.0–2.16.4

arm mbed_tlsRange2.17.0–2.20.0

Node

fedoraproject fedoraMatch30

fedoraproject fedoraMatch31

Node

debian debian_linuxMatch10.0

Source	Link
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NGDACU65MYZXXVPQP2EBHUJGOR4RWLVY/
tls	www.tls.mbed.org/tech-updates/security-advisories
tls	www.tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2019-12
lists	www.lists.debian.org/debian-lts-announce/2022/12/msg00036.html
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A3GWQNONS7GRORXZJ7MOJFUEJ2ZJ4OUW/

21 Nov 2024 04:32Current

4.6Medium risk

Vulners AI Score4.6

CVSS 21.9

CVSS 3.14.7

EPSS0.00109

CWE-203