CVE-2024-23170

🗓️ 31 Jan 2024 00:00:00Reported by mitreType

Issue in Mbed TLS 2.x & 3.x before 2.28.7 & 3.5.2 allows local attacker to recover plaintext via timing side channel in RSA private operations

Reporter	Title	Published	Views	Family All 57
AlpineLinux	CVE-2024-23170	31 Jan 202400:00	–	alpinelinux
AstraLinux	Astra Linux - уязвимость в mbedtls	3 May 202623:59	–	astralinux
CBLMariner	CVE-2024-23170 affecting package hvloader for versions less than 1.0.1-6	27 Nov 202421:27	–	cbl_mariner
Circl	CVE-2024-23170	31 Jan 202409:32	–	circl
CNNVD	Mbed TLS Security Vulnerability	31 Jan 202400:00	–	cnnvd
Cvelist	CVE-2024-23170	31 Jan 202400:00	–	cvelist
Debian CVE	CVE-2024-23170	31 Jan 202400:00	–	debiancve
EUVD	EUVD-2024-20689	3 Oct 202520:07	–	euvd
Fedora	[SECURITY] Fedora 39 Update: mbedtls-2.28.7-1.fc39	17 Feb 202400:57	–	fedora
Fedora	[SECURITY] Fedora 38 Update: mbedtls-2.28.7-1.fc38	22 Feb 202402:24	–	fedora

NVD

Node

arm mbed_tlsRange2.0.0–2.28.7

Source	Link
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IIBPEYSVRK4IFLBSYJAWKH33YBNH5HR2/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GP5UU7Z6LJNBLBT4SC5WWS2HDNMTFZH5/
mbed-tls	www.mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2024-01-1/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/GP5UU7Z6LJNBLBT4SC5WWS2HDNMTFZH5/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/IIBPEYSVRK4IFLBSYJAWKH33YBNH5HR2/

05 Jun 2026 19:38Current

5.3Medium risk

Vulners AI Score5.3

CVSS 3.15.5

EPSS0.00208

SSVC