Lucene search
MitreCVELIST:CVE-2019-18222HistoryJan 23, 2020 - 12:00 a.m.
CVE-2019-18222
2020-01-2300:00:00
mitre
www.cve.org
1
The ECDSA signature implementation in ecdsa.c in Arm Mbed Crypto 2.1 and Mbed TLS through 2.19.1 does not reduce the blinded scalar before computing the inverse, which allows a local attacker to recover the private key via side-channel attacks.
References
lists.debian.org/debian-lts-announce/2022/12/msg00036.html
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A3GWQNONS7GRORXZJ7MOJFUEJ2ZJ4OUW/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NGDACU65MYZXXVPQP2EBHUJGOR4RWLVY/
tls.mbed.org/tech-updates/security-advisories
tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2019-12
Related
debiancve
debiancve
CVE-2019-18222
2020-01-23 17:15:11
nessus
nessus
Fedora 31 : mbedtls (2020-5bcfae9f46)
2020-02-19 00:00:00
FreeBSD : Mbed TLS -- Side channel attack on ECDSA (b70b880f-5727-11ea-a2f3-001cc0382b2f)
2020-02-25 00:00:00
Fedora 30 : mbedtls (2020-8d3ea0fe8d)
2020-02-19 00:00:00
cve
cve
CVE-2019-18222
2020-01-23 17:15:11
veracode
veracode
Information Disclosure
2020-08-06 21:31:23
osv
osv
CVE-2019-18222
2020-01-23 17:15:11
mbedtls - security update
2022-12-26 00:00:00
fedora
fedora
[SECURITY] Fedora 31 Update: mbedtls-2.16.4-1.fc31
2020-02-19 01:54:27
[SECURITY] Fedora 30 Update: mbedtls-2.16.4-1.fc30
2020-02-19 01:28:30
openvas
openvas
Fedora: Security Advisory for mbedtls (FEDORA-2020-5bcfae9f46)
2020-02-19 00:00:00
Mageia: Security Advisory (MGASA-2020-0053)
2022-01-28 00:00:00
Fedora: Security Advisory for mbedtls (FEDORA-2020-8d3ea0fe8d)
2020-02-19 00:00:00
alpinelinux
alpinelinux
CVE-2019-18222
2020-01-23 17:15:11
prion
prion
Information disclosure
2020-01-23 17:15:00
archlinux
archlinux
[ASA-202003-7] mbedtls: private key recovery
2020-03-11 00:00:00
ubuntucve
ubuntucve
CVE-2019-18222
2020-01-23 00:00:00
freebsd
freebsd
Mbed TLS -- Side channel attack on ECDSA
2019-10-25 00:00:00
nvd
nvd
CVE-2019-18222
2020-01-23 17:15:11
mageia
mageia
Updated mbedtls packages fix security vulnerabilities
2020-01-28 10:52:40
debian
debian
[SECURITY] [DLA 3249-1] mbedtls security update
2022-12-25 23:34:21