vulnerability
FreeBSD: VID-bf1f47c4-7f1b-11ea-bf94-001cc0382b2f (CVE-2020-10932): Mbed TLS -- Side channel attack on ECDSA
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 2 | (AV:L/AC:M/Au:N/C:P/I:N/A:N) | Apr 15, 2020 | Apr 16, 2020 | Dec 10, 2025 |
Severity
2
CVSS
(AV:L/AC:M/Au:N/C:P/I:N/A:N)
Published
Apr 15, 2020
Added
Apr 16, 2020
Modified
Dec 10, 2025
Description
Manuel Pégourié-Gonnard reports: An attacker with access to precise enough timing and memory access information (typically an untrusted operating system attacking a secure enclave such as SGX or the TrustZone secure world) can fully recover an ECDSA private key after observing a number of signature operations.
Solution
freebsd-upgrade-package-mbedtls
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.