Fixed
Created: Jul 19, 2021
Updated: Sep 22, 2023
Resolved Date: Sep 22, 2023
Found In Version: 10.21.20.1
Fix Version: 10.21.20.19
Severity: Standard
Applicable for: Wind River Linux LTS 21
Component/s: Userspace
An issue was discovered in Arm Mbed TLS before 2.23.0. A side channel allows recovery of an ECC private key, related to mbedtls_ecp_check_pub_priv, mbedtls_pk_parse_key, mbedtls_pk_parse_keyfile, mbedtls_ecp_mul, and mbedtls_ecp_mul_restartable.
CREATE(Triage):(User=admin) CVE-2020-36422 (https://nvd.nist.gov/vuln/detail/CVE-2020-36422)
