CVE-2024-23170

Name of the Vulnerable Software and Affected Versions Mbed TLS versions 2.x before 2.28.7 Mbed TLS versions 3.x before 3.5.2

Description A timing side channel in RSA private operations could allow a local attacker to recover the plaintext by sending a large number of messages for decryption, as described in "Everlasting ROBOT: the Marvin Attack" by Hubert Kario. This side channel could be exploited by a remote attacker to gain access to confidential information.

Recommendations For Mbed TLS versions 2.x before 2.28.7, update to version 2.28.7 or later to resolve the issue. For Mbed TLS versions 3.x before 3.5.2, update to version 3.5.2 or later to resolve the issue. As a temporary workaround, consider restricting access to RSA private operations until a patch is available.