Unrated severityNVD Advisory· Published Jul 19, 2021· Updated Aug 4, 2024

CVE-2020-36422

Description

An issue was discovered in Arm Mbed TLS before 2.23.0. A side channel allows recovery of an ECC private key, related to mbedtls_ecp_check_pub_priv, mbedtls_pk_parse_key, mbedtls_pk_parse_keyfile, mbedtls_ecp_mul, and mbedtls_ecp_mul_restartable.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Arm/Mbed TLSdescription
Arm/MbedTLSllm-fuzzy
Range: <2.23.0

Patches

Vulnerability mechanics

References

lists.debian.org/debian-lts-announce/2022/12/msg00036.htmlmitremailing-list
bugs.gentoo.org/730752mitre
github.com/ARMmbed/mbedtls/releases/tag/v2.16.7mitre
github.com/ARMmbed/mbedtls/releases/tag/v2.23.0mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000