CVE:CVE-2020-10941
CNNVD:CNNVD-202003-1502
ARM mbed TLS是英国ARM公司的一款为mbed产品提供安全通讯和加密功能的产品。
ARM mbed TLS 2.6.15之前版本中存在安全漏洞。攻击者可利用该漏洞获取敏感信息（RSA私钥）。
solution:Upgrade arm mbed_crypto to a higher version than 3.1.0,and avoid the version (,3.1.0); Upgrade arm mbed_tls to a higher version than 2.16.5,and avoid the version (,2.16.5); Upgrade fedoraproject fedora to a higher version than 31,32,and avoid the version 31,32; Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0