Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The ECDSA signature implementation in ecdsa.c in Arm Mbed Crypto 2.1 and Mbed TLS through 2.19.1 does not reduce the blinded scalar before computing the inverse, which allows a local attacker to recover the private key via side-channel attacks.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Arm Mbed Crypto和Mbed TLS 信息泄露漏洞
Vulnerability Description
Arm Mbed Crypto 2.1版本和Mbed TLS 2.19.1及之前版本中的ecdsa.c文件存在信息泄露漏洞。本地攻击者通过实施侧通道攻击利用该漏洞恢复私钥。
CVSS Information
N/A
Vulnerability Type
N/A