CVE-2019-16910

MEDIUM

Arm Mbed TLS <2.19.0 & Arm Mbed Crypto <2.0.0 - Info Disclosure

Title source: llm
STIX 2.1

Description

Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled, use an RNG with insufficient entropy for blinding, which might allow an attacker to recover a private key via side-channel attacks if a victim signs the same message many times. (For Mbed TLS, the fix is also available in versions 2.7.12 and 2.16.3.)

Scores

CVSS v3 5.3
EPSS 0.0092
EPSS Percentile 76.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

Details

Status published
Products (6)
arm/mbed_crypto < 2.0.0
arm/mbed_tls < 2.7.12
debian/debian_linux 10.0
fedoraproject/fedora 29
fedoraproject/fedora 30
fedoraproject/fedora 31
Published Sep 26, 2019
Tracked Since Feb 18, 2026