Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In Trusted Firmware Mbed TLS 2.24.0, a side-channel vulnerability in base64 PEM file decoding allows system-level (administrator) attackers to obtain information about secret RSA keys via a controlled-channel and side-channel attack on software running in isolated environments that can be single stepped, especially Intel SGX.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Trusted Firmware M 安全漏洞
Vulnerability Description
ARM Trusted Firmware M（TFM）是英国ARM公司的一个开源软件。提供了一组高度可配置的软件组件，以创建受信任的执行环境。 Trusted Firmware Mbed TLS 存在安全漏洞，该漏洞源于在 Trusted Firmware Mbed TLS 2.24.0 中，base64 PEM 文件解码中存在一个旁道漏洞。攻击者可利用该漏洞控制通道和侧通道攻击在隔离环境中运行的软件，可以是单步的，特别是Intel SGX，获得秘密RSA密钥的信息。
CVSS Information
N/A
Vulnerability Type
N/A