A
n issue was discovered in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2. There was a timing side channel in RSA private operations. This side channel could be sufficient for a local attacker to recover the plaintext. It requires the attacker to send a large number of messages for decryption, as described in "Everlasting ROBOT: the Marvin Attack" by Hubert Kario.
References
Configurations
Configuration 1 (hide)
|
History
04 Nov 2025, 19:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
20 Jun 2025, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-385 |
21 Nov 2024, 08:57
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GP5UU7Z6LJNBLBT4SC5WWS2HDNMTFZH5/ - | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IIBPEYSVRK4IFLBSYJAWKH33YBNH5HR2/ - | |
| References | () https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2024-01-1/ - Vendor Advisory |
Information
Published : 2024-01-31 08:15
Updated : 2025-11-04 19:16
NVD link : CVE-2024-23170
Mitre link : CVE-2024-23170
CVE.ORG link : CVE-2024-23170
JSON object : View