2021-01-14 05:01:42 +00:00
{
2022-12-27 00:01:22 +00:00
"data_version" : "4.0" ,
"data_type" : "CVE" ,
"data_format" : "MITRE" ,
2021-01-14 05:01:42 +00:00
"CVE_data_meta" : {
2021-07-14 13:00:47 +00:00
"ID" : "CVE-2021-24119" ,
2022-12-27 00:01:22 +00:00
"ASSIGNER" : "cve@mitre.org" ,
2021-07-14 13:00:47 +00:00
"STATE" : "PUBLIC"
2021-01-14 05:01:42 +00:00
} ,
"description" : {
"description_data" : [
{
"lang" : "eng" ,
2021-07-14 13:00:47 +00:00
"value" : "In Trusted Firmware Mbed TLS 2.24.0, a side-channel vulnerability in base64 PEM file decoding allows system-level (administrator) attackers to obtain information about secret RSA keys via a controlled-channel and side-channel attack on software running in isolated environments that can be single stepped, especially Intel SGX."
}
]
} ,
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng" ,
"value" : "n/a"
}
]
}
]
} ,
2022-12-27 00:01:22 +00:00
"affects" : {
"vendor" : {
"vendor_data" : [
{
"vendor_name" : "n/a" ,
"product" : {
"product_data" : [
{
"product_name" : "n/a" ,
"version" : {
"version_data" : [
{
"version_value" : "n/a" ,
"version_affected" : "?"
}
]
}
}
]
}
}
]
}
} ,
2021-07-14 13:00:47 +00:00
"references" : {
"reference_data" : [
{
"url" : "https://github.com/ARMmbed/mbedtls/releases" ,
"refsource" : "MISC" ,
"name" : "https://github.com/ARMmbed/mbedtls/releases"
} ,
{
2022-12-27 00:01:22 +00:00
"url" : "https://lists.debian.org/debian-lts-announce/2022/12/msg00036.html" ,
2021-07-14 13:00:47 +00:00
"refsource" : "MISC" ,
2022-12-27 00:01:22 +00:00
"name" : "https://lists.debian.org/debian-lts-announce/2022/12/msg00036.html"
2021-08-02 03:01:02 +00:00
} ,
{
2022-12-27 00:01:22 +00:00
"url" : "https://lists.debian.org/debian-lts-announce/2021/11/msg00021.html" ,
"refsource" : "MISC" ,
"name" : "https://lists.debian.org/debian-lts-announce/2021/11/msg00021.html"
2021-08-02 03:01:02 +00:00
} ,
{
2022-12-27 00:01:22 +00:00
"url" : "https://github.com/UzL-ITS/util-lookup/blob/main/cve-vulnerability-publication.md" ,
"refsource" : "MISC" ,
"name" : "https://github.com/UzL-ITS/util-lookup/blob/main/cve-vulnerability-publication.md"
2021-11-23 16:01:01 +00:00
} ,
{
2022-12-27 00:01:22 +00:00
"url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DRRVY7DMTX3ECFNZKDYTSFEG5AI2HBC6/" ,
"refsource" : "MISC" ,
"name" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DRRVY7DMTX3ECFNZKDYTSFEG5AI2HBC6/"
2022-12-26 03:00:43 +00:00
} ,
{
2022-12-27 00:01:22 +00:00
"url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EYJW7HAW3TDV2YMDFYXP3HD6WRQRTLJW/" ,
"refsource" : "MISC" ,
"name" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EYJW7HAW3TDV2YMDFYXP3HD6WRQRTLJW/"
2021-01-14 05:01:42 +00:00
}
]
}
}
