Raoul Strackx

The issue is related to the incorrect use of a revocationDate check when deciding whether to honor certificate revocation via a CRL. This can be exploited by an attacker in certain situations by changing the local clock, potentially affecting data integrity.

A remote attacker can recover plaintext because a certain Lucky 13 countermeasure doesn't properly consider the case of a hardware accelerator. This issue is related to the implementation of TLS and SSL protocols in Mbed TLS, allowing an attacker to access confidential data.

The issue is related to a side channel in modular exponentiation, which could disclose an RSA private key used in a secure enclave. This is due to a dependency of the instruction timing on the instruction data, allowing a remote attacker to access confidential data.

A side channel issue allows the recovery of an ECC private key. This is related to functions such as `mbedtls ecp check pub priv`, `mbedtls pk parse key`, `mbedtls pk parse keyfile`, `mbedtls ecp mul`, and `mbedtls ecp mul restartable`. The issue can be exploited by a remote attacker to gain access to confidential data.

The issue is related to the implementation of Intel Software Guard Extensions (SGX) technology and speculative execution in microprocessors. It may allow unauthorized disclosure of information from an enclave to an attacker with local user access via a side-channel analysis. This can enable an attacker to read data from the L1 cache, which may contain fragments of data from the protected area after speculative execution.