Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Mageia 7: MGASA-2020-0130 Moderate: Mbedtls RSA Key Attack

mageia
Calendar Grey March 8, 2020
Dist Mageia Esm H88
Investigate MGASA-2020-0130 which relates to mbedtls revisions aimed at mitigating severe security threats and flaws.
Updated mbedtls packages fix security vulnerabilities: If Mbed TLS is running in an SGX enclave and the adversary has control of the main operating system, they can launch a side ...

Summary

Updated mbedtls packages fix security vulnerabilities: If Mbed TLS is running in an SGX enclave and the adversary has control of the main operating system, they can launch a side channel attack to recover the RSA private key when it is being imported. Found by Alejandro

References

- https://bugs.mageia.org/show_bug.cgi?id=26259

- - https://www.trustedfirmware.org/projects/mbed-tls/

Topics%20covered

Topics Covered

security advisory DoS RSA attack mbedtls Mageia memory overread

Resolution

SRPMS

- 7/core/mbedtls-2.16.5-1.mga7

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 08 Mar 2020
URL: https://advisories.mageia.org/MGASA-2020-0130.html
Type: security

Topics%20covered

Topics Covered

security advisory DoS RSA attack mbedtls Mageia memory overread

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here