Threats tagged 'ghsa-w2fw-qqqw-v63m'

A timing side channel vulnerability exists in Mbed TLS versions 2.x before 2.28.7 and 3.x before 3.5.2 affecting RSA private key operations. This flaw could allow a local attacker to recover plaintext by sending a large number of decryption requests, as detailed in the research "Everlasting ROBOT: the Marvin Attack." The vulnerability has a medium severity rating with a CVSS score of 5.5. No public exploit or in-the-wild exploitation is currently known.