Vulnerabilities > CVE-2020-10941

CVSS 5.9 - MEDIUM

Attack vector

NETWORK

Attack complexity

HIGH

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

high complexity

arm

fedoraproject

debian

NVD

Published: 2020-03-24

Updated: 2023-02-24

Summary

Arm Mbed TLS before 2.16.5 allows attackers to obtain sensitive information (an RSA private key) by measuring cache usage during an import.

Vulnerable Configurations

Part	Description	Count
Application	Arm ARM Mbed Crypto - ARM Mbed Crypto 0.1.0 ARM Mbed Crypto 1.0.0 ARM Mbed Crypto 1.1.0 ARM Mbed Crypto 1.1.1 ARM Mbed Crypto 2.0.0 ARM Mbed Crypto 2.1.0 ARM Mbed Crypto 3.0.0 ARM Mbed Crypto 3.0.1 ARM Mbed TLS - ARM Mbed TLS 1.3.0 ARM Mbed TLS 1.3.1 ARM Mbed TLS 1.3.2 ARM Mbed TLS 1.3.3 ARM Mbed TLS 1.3.4 ARM Mbed TLS 1.3.5 ARM Mbed TLS 1.3.6 ARM Mbed TLS 1.3.7 ARM Mbed TLS 1.3.8 ARM Mbed TLS 1.3.9 ARM Mbed TLS 1.3.10 ARM Mbed TLS 1.3.11 ARM Mbed TLS 1.3.12 ARM Mbed TLS 1.3.13 ARM Mbed TLS 1.3.14 ARM Mbed TLS 1.3.15 ARM Mbed TLS 1.3.16 ARM Mbed TLS 1.3.17 ARM Mbed TLS 1.3.18 ARM Mbed TLS 1.3.19 ARM Mbed TLS 1.3.20 ARM Mbed TLS 1.3.21 ARM Mbed TLS 1.3.22 ARM Mbed TLS 2.0.0 ARM Mbed TLS 2.1.0 ARM Mbed TLS 2.1.1 ARM Mbed TLS 2.1.2 ARM Mbed TLS 2.1.3 ARM Mbed TLS 2.1.4 ARM Mbed TLS 2.1.5 ARM Mbed TLS 2.1.6 ARM Mbed TLS 2.1.7 ARM Mbed TLS 2.1.8 ARM Mbed TLS 2.1.9 ARM Mbed TLS 2.1.10 ARM Mbed TLS 2.1.11 ARM Mbed TLS 2.1.12 ARM Mbed TLS 2.1.13 ARM Mbed TLS 2.1.14 ARM Mbed TLS 2.1.15 ARM Mbed TLS 2.1.16 ARM Mbed TLS 2.1.17 ARM Mbed TLS 2.1.18 ARM Mbed TLS 2.2.0 ARM Mbed TLS 2.2.1 ARM Mbed TLS 2.2.2 ARM Mbed TLS 2.2.3 ARM Mbed TLS 2.3.0 ARM Mbed TLS 2.3.1 ARM Mbed TLS 2.3.2 ARM Mbed TLS 2.4.0 ARM Mbed TLS 2.4.1 ARM Mbed TLS 2.4.2 ARM Mbed TLS 2.5.0 ARM Mbed TLS 2.5.1 ARM Mbed TLS 2.6.0 ARM Mbed TLS 2.6.1 ARM Mbed TLS 2.7.0 ARM Mbed TLS 2.7.1 ARM Mbed TLS 2.7.2 ARM Mbed TLS 2.7.3 ARM Mbed TLS 2.7.4 ARM Mbed TLS 2.7.5 ARM Mbed TLS 2.7.6 ARM Mbed TLS 2.7.7 ARM Mbed TLS 2.7.8 ARM Mbed TLS 2.7.9 ARM Mbed TLS 2.7.10 ARM Mbed TLS 2.7.11 ARM Mbed TLS 2.7.12 ARM Mbed TLS 2.7.13 ARM Mbed TLS 2.7.14 ARM Mbed TLS 2.7.15 ARM Mbed TLS 2.7.16 ARM Mbed TLS 2.7.17 ARM Mbed TLS 2.7.18 ARM Mbed TLS 2.8.0 ARM Mbed TLS 2.9.0 ARM Mbed TLS 2.10.0 ARM Mbed TLS 2.11.0 ARM Mbed TLS 2.12.0 ARM Mbed TLS 2.13.0 ARM Mbed TLS 2.13.1 ARM Mbed TLS 2.14.0 ARM Mbed TLS 2.14.1 ARM Mbed TLS 2.15.0 ARM Mbed TLS 2.15.1 ARM Mbed TLS 2.16.0 ARM Mbed TLS 2.16.1 ARM Mbed TLS 2.16.2 ARM Mbed TLS 2.16.3 ARM Mbed TLS 2.16.4	149
OS	Fedoraproject Fedoraproject Fedora 31 Fedoraproject Fedora 32	2
OS	Debian Debian Debian Linux 10.0	1

Vulnerabilities > CVE-2020-10941 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2020-10941"}]}

Summary

Vulnerable Configurations

References

Vulnerabilities > CVE-2020-10941