Every CVE Search/ Get API key

CVE-2020-16150

A Lucky 13 timing side channel in mbedtls_ssl_decrypt_buf in library/ssl_msg.c in Trusted...

5.5 MediumFix available

A Lucky 13 timing side channel in mbedtls_ssl_decrypt_buf in library/ssl_msg.c in Trusted Firmware Mbed TLS through 2.23.0 allows an attacker to recover secret key information. This affects CBC mode because of a computed time difference based on a padding length.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
None

Exploit likelihood

0.38%Down 0.9 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 5.5

A Lucky 13 timing side channel in mbedtls_ssl_decrypt_buf in library/ssl_msg.c in Trusted Firmware Mbed TLS through 2.23.0 allows an attacker to recover secret key information. This affects CBC mode because of a computed time difference based on a padding length.

Record
CVE-2020-16150
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0
2.1 LowAV:L/AC:L/Au:N/C:P/I:N/A:N
Weakness
CWE-203
Updated
2026-11-02
CVE List No score

A Lucky 13 timing side channel in mbedtls_ssl_decrypt_buf in library/ssl_msg.c in Trusted Firmware Mbed TLS through 2.23.0 allows an attacker to recover secret key information. This affects CBC mode because of a computed time difference based on a padding length.

Record
CVE-2020-16150
Updated
2026-11-02
EUVDEUVD-2020-8116 No score

A Lucky 13 timing side channel in mbedtls_ssl_decrypt_buf in library/ssl_msg.c in Trusted Firmware Mbed TLS through 2.23.0 allows an attacker to recover secret key information. This affects CBC mode because of a computed time difference based on a padding length.

Record
EUVD-2020-8116
Updated
2026-11-03
GitHub AdvisoriesGHSA-fgr3-j7rx-4hfv 5.5

A Lucky 13 timing side channel in mbedtls_ssl_decrypt_buf in library/ssl_msg.c in Trusted...

A Lucky 13 timing side channel in mbedtls_ssl_decrypt_buf in library/ssl_msg.c in Trusted Firmware Mbed TLS through 2.23.0 allows an attacker to recover secret key information. This affects CBC mode because of a computed time difference based on a padding length.

Record
GHSA-fgr3-j7rx-4hfv
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-203
Updated
2026-11-02
OSVALPINE-CVE-2020-16150 5.5

A Lucky 13 timing side channel in mbedtls_ssl_decrypt_buf in library/ssl_msg.c in Trusted Firmware Mbed TLS through 2.23.0 allows an attacker to recover secret key information. This affects CBC mode because of a computed time difference based on a padding length.

Record
ALPINE-CVE-2020-16150
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-03
OSV 5.5

A Lucky 13 timing side channel in mbedtls_ssl_decrypt_buf in library/ssl_msg.c in Trusted Firmware Mbed TLS through 2.23.0 allows an attacker to recover secret key information. This affects CBC mode because of a computed time difference based on a padding length.

Record
CVE-2020-16150
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
Show 4 moreShow less
OSVDEBIAN-CVE-2020-16150 5.5

A Lucky 13 timing side channel in mbedtls_ssl_decrypt_buf in library/ssl_msg.c in Trusted Firmware Mbed TLS through 2.23.0 allows an attacker to recover secret key information. This affects CBC mode because of a computed time difference based on a padding length.

Record
DEBIAN-CVE-2020-16150
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVJLSEC-2025-202 5.5

A Lucky 13 timing side channel in `mbedtls_ssl_decrypt_buf` in `library/ssl_msg.c` in Trusted...

A Lucky 13 timing side channel in mbedtls_ssl_decrypt_buf in library/ssl_msg.c in Trusted Firmware Mbed TLS through 2.23.0 allows an attacker to recover secret key information. This affects CBC mode because of a computed time difference based on a padding length.

Record
JLSEC-2025-202
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0
2.1 LowAV:L/AC:L/Au:N/C:P/I:N/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2020-16150 5.5

A Lucky 13 timing side channel in mbedtls_ssl_decrypt_buf in library/ssl_msg.c in Trusted Firmware Mbed TLS through 2.23.0 allows an attacker to recover secret key information. This affects CBC mode because of a computed time difference based on a padding length.

Record
UBUNTU-CVE-2020-16150
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVMGASA-2020-0370 No score

Updated mbedtls packages fix security vulnerabilities

mbedtls 2.16.8 fixes three security vulnerabilities which could affect earlier releases:

Local side channel attack on classical CBC decryption in (D)TLS (CVE-2020-16150).

Local side channel attack on RSA and static Diffie-Hellman.

Protocol weakness in DHE-PSK key exchange.

Record
MGASA-2020-0370
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
mbedtls
Alpine:v3.10
 before 2.16.8-r0
2.16.8-r0
mbedtls
Alpine:v3.11
 before 2.16.8-r0
2.16.8-r0
mbedtls
Alpine:v3.12
 before 2.16.8-r0
2.16.8-r0
mbedtls
Alpine:v3.13
 before 2.16.8-r0
2.16.8-r0
mbedtls
Alpine:v3.14
 before 2.16.8-r0
2.16.8-r0
mbedtls
Alpine:v3.15
 before 2.16.8-r0
2.16.8-r0
mbedtls
Alpine:v3.16
 before 2.16.8-r0
2.16.8-r0
mbedtls
Alpine:v3.17
 before 2.16.8-r0
2.16.8-r0
mbedtls
Alpine:v3.18
 before 2.16.8-r0
2.16.8-r0
mbedtls
Alpine:v3.19
 before 2.16.8-r0
2.16.8-r0
Show 20 moreShow less
Affected packages
PackageAffectedFixed
mbedtls
Alpine:v3.20
 before 2.16.8-r0
2.16.8-r0
mbedtls
Alpine:v3.21
 before 2.16.8-r0
2.16.8-r0
mbedtls
Alpine:v3.22
 before 2.16.8-r0
2.16.8-r0
mbedtls
Alpine:v3.23
 before 2.16.8-r0
2.16.8-r0
mbedtls
Alpine:v3.24
 before 2.16.8-r0
2.16.8-r0
mbedtls2
Alpine:v3.20
 before 2.16.8-r0
2.16.8-r0
mbedtls2
Alpine:v3.21
 before 2.16.8-r0
2.16.8-r0
mbedtls2
Alpine:v3.22
 before 2.16.8-r0
2.16.8-r0
mbedtls2
Alpine:v3.23
 before 2.16.8-r0
2.16.8-r0
mbedtls2
Alpine:v3.24
 before 2.16.8-r0
2.16.8-r0
mbedtls3
Alpine:v3.24
 before 2.16.8-r0
2.16.8-r0
mbedtls
Debian:12
 before 2.16.9-0.1
2.16.9-0.1
mbedtls
Debian:13
 before 2.16.9-0.1
2.16.9-0.1
mbedtls
Debian:14
 before 2.16.9-0.1
2.16.9-0.1
mbedtls
Debian:10
From an advisory covering 18 CVEs
 before 2.16.9-0~deb10u1, plus listed versions
2.16.0-12.16.2-12.16.3-12.16.4-12.16.5-1
2.16.9-0~deb10u1
MbedTLS_jll
Julia
 before 2.16.8+0
2.16.8+0
mbedtls
Mageia:7
 before 2.16.8-1.mga7
2.16.8-1.mga7
mbedtls
Ubuntu:16.04:LTS
 All versions, plus listed versions
2.1.2-12.2.0-12.2.1-12.2.1-22.2.1-2ubuntu0.12.2.1-2ubuntu0.22.2.1-2ubuntu0.3
 None known
mbedtls
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
2.5.1-1ubuntu12.6.0-12.7.0-22.8.0-12.8.0-1ubuntu0.1~esm1
 None known
mbedtls
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
2.16.2-12.16.3-12.16.4-1ubuntu22.16.4-1ubuntu2+esm1
 None known

History

History
RecordedChangedSources
affected, facts
affectedOSV
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-16150 is a medium vulnerability (CVSS 5.5) in Arm Mbed Tls, published September 2, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 32nd percentile. Fixed in mbedtls 2.16.8-r0.

References

Show 13 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open