CVE-2021-36647
CVSS V2 None
CVSS V3 None
Description
Use of a Broken or Risky Cryptographic Algorithm in the function mbedtls_mpi_exp_mod() in lignum.c in Mbed TLS Mbed TLS all versions before 3.0.0, 2.27.0 or 2.16.11 allows attackers with access to precise enough timing and memory access information (typically an untrusted operating system attacking a secure enclave such as SGX or the TrustZone secure world) to recover the private keys used in RSA.
Overview
- CVE ID
- CVE-2021-36647
- Assigner
- cve@mitre.org
- Vulnerability Status
- Analyzed
- Published Version
- 2023-01-17T21:15:10
- Last Modified Date
- 2023-01-27T17:56:00
Weakness Enumerations
CPE Configuration (Product)
| CPE | Vulnerable | Operator | Version Start | Version End |
|---|---|---|---|---|
| cpe:2.3:a:arm:mbed_tls:*:*:*:*:*:*:*:* | 1 | OR | 2.16.11 | |
| cpe:2.3:a:arm:mbed_tls:*:*:*:*:*:*:*:* | 1 | OR | 2.17.0 | 2.27.0 |
| cpe:2.3:a:arm:mbed_tls:*:*:*:*:*:*:*:* | 1 | OR | 2.28.0 | 3.0.0 |
References
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2021-36647 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36647 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2023-01-17 22:18:07 | Added to TrackCVE | |||
| 2023-01-17 23:14:26 | 2023-01-17T23:01:04 | CVE Modified Date | updated | |
| 2023-01-17 23:14:26 | Received | Awaiting Analysis | Vulnerability Status | updated |
| 2023-01-24 11:14:20 | Awaiting Analysis | Undergoing Analysis | Vulnerability Status | updated |
| 2023-01-27 18:14:22 | 2023-01-27T17:56:00 | CVE Modified Date | updated | |
| 2023-01-27 18:14:22 | Undergoing Analysis | Analyzed | Vulnerability Status | updated |
| 2023-01-27 18:14:22 | Weakness Enumeration | new | ||
| 2023-01-27 18:14:23 | CPE Information | updated |