Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
4.7
CVE-2019-18222: Arm Mbed Crypto and Mbed TLS: Private Key Exposure via Side-Channel Attack
CVE-2019-18222 · published 6 years ago
Summary
A flaw in the way Arm Mbed Crypto and Mbed TLS handle digital signatures could allow an attacker with access to the system to steal sensitive information. This is a concern for organizations that use these libraries to secure their online transactions. To protect yourself, update to a fixed version of the library or consider using an alternative library that has this issue fixed.
What to do
- Update debian mbedtls to version 2.16.4-1.
- Update arm mbed_crypto to version 3.0.0 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:16.04:LTS | canonical | mbedtls | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | mbedtls | All versions |
| Debian:12 | debian | mbedtls |
< 2.16.4-1 Fix: upgrade to 2.16.4-1
|
| – | arm | mbed_crypto |
< 3.0.0 cpe:2.3:a:arm:mbed_crypto:*:*:*:*:*:*:*:* |
| – | arm | mbed_tls |
< 2.7.13 >= 2.8.0, < 2.16.4 >= 2.17.0, < 2.20.0 cpe:2.3:a:arm:mbed_tls:*:*:*:*:*:*:*:* |
| – | fedoraproject | fedora |
30 31 cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:* |
| – | debian | debian_linux |
10.0 cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* |
Original advisory text
The ECDSA signature implementation in ecdsa.c in Arm Mbed Crypto 2.1 and Mbed TLS through 2.19.1 does not reduce the blinded scalar before computing the inverse, which allows a local attacker to re...
The ECDSA signature implementation in ecdsa.c in Arm Mbed Crypto 2.1 and Mbed TLS through 2.19.1 does not reduce the blinded scalar before computing the inverse, which allows a local attacker to recover the private key via side-channel attacks.
References
- https://ubuntu.com/security/CVE-2019-18222 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2019-18222 Third Party Advisory
- https://tls.mbed.org/tech-updates/security-advisories Vendor Advisory
- https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-... Vendor Advisory
- https://lists.debian.org/debian-lts-announce/2022/12/msg00036.html Mailing List Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro... Mailing List Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro... Mailing List Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2019-18222 Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-203Observable Discrepancy
Timeline
Published23 Jan 2020
Updated4 Nov 2026
First seen25 Mar 2026
Sources
UBUNTU-CVE-2019-18222 · OSV
CVE-2019-18222 · OSV
CVE-2019-18222 · NVD
DEBIAN-CVE-2019-18222 · OSV
Track software like this
Free during beta