vulnerability
SUSE: CVE-2021-24119: SUSE Linux Security Advisory
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:L/Au:S/C:P/I:N/A:N) | Jul 14, 2021 | Oct 12, 2021 | Oct 26, 2022 |
Severity
4
CVSS
(AV:N/AC:L/Au:S/C:P/I:N/A:N)
Published
Jul 14, 2021
Added
Oct 12, 2021
Modified
Oct 26, 2022
Description
In Trusted Firmware Mbed TLS 2.24.0, a side-channel vulnerability in base64 PEM file decoding allows system-level (administrator) attackers to obtain information about secret RSA keys via a controlled-channel and side-channel attack on software running in isolated environments that can be single stepped, especially Intel SGX.
Solution(s)
suse-upgrade-libmbedcrypto3suse-upgrade-libmbedcrypto3-32bitsuse-upgrade-libmbedcrypto3-64bitsuse-upgrade-libmbedtls12suse-upgrade-libmbedtls12-32bitsuse-upgrade-libmbedtls12-64bitsuse-upgrade-libmbedx509-0suse-upgrade-libmbedx509-0-32bitsuse-upgrade-libmbedx509-0-64bitsuse-upgrade-mbedtls-devel
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.