CVE:CVE-2020-10932
CNNVD:CNNVD-202004-1190
ARM mbed TLS是英国ARM公司的一款为mbed产品提供安全通讯和加密功能的产品。
Arm Mbed TLS 2.16.6之前版本和2.7.15之前的2.7.x版本中存在加密问题漏洞。攻击者可利用该漏洞恢复长期有效的ECDSA私钥。
solution:Upgrade arm mbed_tls to a higher version than 2.7.15,2.16.6,and avoid the version [2.7.0,2.7.15),[2.16.0,2.16.6); Upgrade fedoraproject fedora to a higher version than 31,32,and avoid the version 31,32; Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0