Vulnetix
Try Vulnetix Request Demo
CVE-2020-36422 PUBLISHED

An issue was discovered in Arm Mbed TLS before 2.23.0. A side channel allows recovery of an ECC private key, related to mbedtls_ecp_check_pub_priv, mbedtls_pk_parse_key, mbedtls_pk_parse_keyfile, mbedtls_ecp_mul, and mbedtls_ecp_mul_restartable.

EPSS 0.34% · 56.5th percentile

Risk Scores

EPSS Score
0.34%
56.5th percentile

Affected Products

VendorProductVersions
Ubuntu:20.04:LTSmbedtls0, 2.16.2-1, 2.16.4-1ubuntu2
Ubuntu:16.04:LTSmbedtls2.1.2-1, 2.2.0-1, 2.2.1-1
Ubuntu:18.04:LTSmbedtls2.6.0-1, 2.7.0-2, 2.8.0-1

Timeline

References

Open in Interactive Console →