Lucene search

K
osvGoogleOSV:CVE-2021-24119
HistoryJul 14, 2021 - 1:15 p.m.

CVE-2021-24119

2021-07-1413:15:08
Google
osv.dev
9
trusted firmware mbed tls
side-channel vulnerability
base64 pem
rsa keys
isolated environments
intel sgx
software running

AI Score

6.1

Confidence

Low

EPSS

0.001

Percentile

48.7%

In Trusted Firmware Mbed TLS 2.24.0, a side-channel vulnerability in base64 PEM file decoding allows system-level (administrator) attackers to obtain information about secret RSA keys via a controlled-channel and side-channel attack on software running in isolated environments that can be single stepped, especially Intel SGX.

AI Score

6.1

Confidence

Low

EPSS

0.001

Percentile

48.7%