Related Vulnerabilities: CVE-2021-24119  

In Trusted Firmware Mbed TLS before version 2.26.0, a side-channel vulnerability in base64 PEM file decoding allows system-level (administrator) attackers to obtain information about secret RSA keys via a controlled-channel and side-channel attack on software running in isolated environments that can be single stepped, especially Intel SGX.

Severity Medium

Remote No

Type Information disclosure

Description

In Trusted Firmware Mbed TLS before version 2.26.0, a side-channel vulnerability in base64 PEM file decoding allows system-level (administrator) attackers to obtain information about secret RSA keys via a controlled-channel and side-channel attack on software running in isolated environments that can be single stepped, especially Intel SGX.

AVG-2153 mbedtls 2.25.0-1 2.26.0-1 Medium Fixed

https://github.com/UzL-ITS/util-lookup/blob/main/cve-vulnerability-publication.md#vulnerability-information-for-cve-2021-24119
https://github.com/ARMmbed/mbedtls/commit/0544d49330b9b12b244a54c9ff145d55c45f1aaf