CVE-2021-24119

Name of the Vulnerable Software and Affected Versions Mbed TLS version 2.24.0

Description A side-channel vulnerability in base64 PEM file decoding exists, allowing system-level attackers to obtain information about secret RSA keys via a controlled-channel and side-channel attack on software running in isolated environments. This issue is related to the use of base64 decoding functionality with non-constant execution time, which can be exploited by a remote attacker to access confidential data.

Recommendations For Mbed TLS version 2.24.0, consider disabling the base64 PEM file decoding functionality as a temporary workaround until a patch is available. Restrict access to sensitive data and confidential information to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.