Security Advisory

CVE-2019-18222

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-01-23 00:00:00

Last updated 2024-08-05 01:47:14

Assigner mitre

State PUBLISHED

Description

The ECDSA signature implementation in ecdsa.c in Arm Mbed Crypto 2.1 and Mbed TLS through 2.19.1 does not reduce the blinded scalar before computing the inverse, which allows a local attacker to recover the private key via side-channel attacks.

← Browse all CVEs View on cve.org ↗