Arm Mbed TLS before 2.16.5 allows attackers to obtain sensitive information (an RSA private key) by measuring cache usage during an import.

Original description

The description as published by the source.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Fix status by distribution

Fixed packages published by each distribution for this CVE

• Debian DEBIAN-CVE-2020-10941 mbedtls Fixed in: 2.16.5-1

References

• advisory lists.debian.org
• advisory lists.fedoraproject.org
• advisory lists.fedoraproject.org
• advisory tls.mbed.org