CVEvulnerability

CVE-2019-16910

5.3 MEDIUM Published 2019-09-26 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-09-26
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
2.6 LOW — AV:N/AC:H/Au:N/C:P/I:N/A:N

Description

Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled, use an RNG with insufficient entropy for blinding, which might allow an attacker to recover a private key via side-channel attacks if a victim signs the same message many times. (For Mbed TLS, the fix is also available in versions 2.7.12 and 2.16.3.)

Affected configurations

• arm mbed crypto (< 2.0.0) • arm mbed tls (< 2.7.12) • arm mbed tls (>= 2.8.0 < 2.16.3) • trustedfirmware mbed tls (>= 2.17.0 < 2.19.0) • fedoraproject fedora 29 • fedoraproject fedora 30 • fedoraproject fedora 31 • debian debian linux 10.0

References