{"id":"CVE-2019-16910","aliases":["ALPINE-CVE-2019-16910","DEBIAN-CVE-2019-16910","DLA-3249-1","EUVD-2019-7407","GHSA-jg4p-c829-4q39","JLSEC-2025-198","MGASA-2020-0053","UBUNTU-CVE-2019-16910"],"status":"published","title":"Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled,...","description":"Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled, use an RNG with insufficient entropy for blinding, which might allow an attacker to recover a private key via side-channel attacks if a victim signs the same message many times. (For Mbed TLS, the fix is also available in versions 2.7.12 and 2.16.3.)","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.01759,"percentile":0.78167,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-200"],"published":"2019-09-26T00:00:00Z","modified":"2026-11-03T06:31:52Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"mbedtls","fixed_in":["2.16.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"mbedtls","fixed_in":["2.16.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"mbedtls","fixed_in":["2.16.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"mbedtls","fixed_in":["2.16.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"mbedtls","fixed_in":["2.16.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"mbedtls","fixed_in":["2.16.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"mbedtls","fixed_in":["2.16.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"mbedtls","fixed_in":["2.16.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"mbedtls","fixed_in":["2.16.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"mbedtls","fixed_in":["2.16.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"mbedtls","fixed_in":["2.16.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"mbedtls","fixed_in":["2.16.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"mbedtls","fixed_in":["2.16.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"mbedtls","fixed_in":["2.16.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"mbedtls","fixed_in":["2.16.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"mbedtls2","fixed_in":["2.16.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"mbedtls2","fixed_in":["2.16.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"mbedtls2","fixed_in":["2.16.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"mbedtls2","fixed_in":["2.16.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"mbedtls2","fixed_in":["2.16.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"mbedtls3","fixed_in":["2.16.3-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"mbedtls","fixed_in":["2.16.3-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"mbedtls","fixed_in":["2.16.3-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"mbedtls","fixed_in":["2.16.3-1"],"sources":["osv"]},{"ecosystem":"Julia","package":"MbedTLS_jll","fixed_in":["2.16.6+0"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"mbedtls2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"mbedtls2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"mbedtls2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"mbedtls2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"mbedtls2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"mbedtls3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.3-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.3-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.3-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.3-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.9-0~deb10u1"}]}],"versions":["2.16.0-1","2.16.2-1","2.16.3-1","2.16.4-1","2.16.5-1"],"bundled":18},{"source":"osv","ecosystem":"Julia","package":"MbedTLS_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.16.6+0"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.4-1.mga7"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.1.2-1","2.2.0-1","2.2.1-1","2.2.1-2","2.2.1-2ubuntu0.1","2.2.1-2ubuntu0.2","2.2.1-2ubuntu0.3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.5.1-1ubuntu1","2.6.0-1","2.7.0-2","2.8.0-1","2.8.0-1ubuntu0.1~esm1"]}],"products":[{"vendor":"arm","product":"mbed_crypto"},{"vendor":"arm","product":"mbed_tls"},{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"trustedfirmware","product":"mbed_tls"}],"references":[{"url":"https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2019-10","tags":["x_transferred","Vendor Advisory","advisory","web","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PEHHH2DOBXB25CAU3Q6E66X723VAYTB5/","tags":["vendor-advisory","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://github.com/ARMmbed/mbedtls/commit/298a43a77ec0ed2c19a8c924ddd8571ef3e65dfd","tags":["x_transferred","Patch","fix","web","report"]},{"url":"https://github.com/ARMmbed/mbedtls/commit/33f66ba6fd234114aa37f0209dac031bb2870a9b","tags":["x_transferred","Patch","fix","web","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CSFFOROD6IVLADZHNJC2LPDV7FQRP7XB/","tags":["vendor-advisory","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CGSKQSGR5SOBRBXDSSPTCDSBB5K3GMPF/","tags":["vendor-advisory","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/12/msg00036.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16910"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CGSKQSGR5SOBRBXDSSPTCDSBB5K3GMPF"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CSFFOROD6IVLADZHNJC2LPDV7FQRP7XB"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PEHHH2DOBXB25CAU3Q6E66X723VAYTB5"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CGSKQSGR5SOBRBXDSSPTCDSBB5K3GMPF"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CSFFOROD6IVLADZHNJC2LPDV7FQRP7XB"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PEHHH2DOBXB25CAU3Q6E66X723VAYTB5"},{"url":"https://github.com/advisories/GHSA-jg4p-c829-4q39"},{"url":"https://security.alpinelinux.org/vuln/CVE-2019-16910","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-16910","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2020-0053.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=25952","tags":["report"]},{"url":"https://tls.mbed.org/tech-updates/releases/mbedtls-2.16.3-and-2.7.12-released","tags":["web"]},{"url":"https://tls.mbed.org/tech-updates/releases/mbedtls-2.16.4-and-2.7.13-released","tags":["web"]},{"url":"https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2019-12","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-16910","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16910","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2019-16910","description":"Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled, use an RNG with insufficient entropy for blinding, which might allow an attacker to recover a private key via side-channel attacks if a victim signs the same message many times. (For Mbed TLS, the fix is also available in versions 2.7.12 and 2.16.3.)","status":"published","published":"2019-09-26T00:00:00Z","modified":"2024-08-05T01:24:48.563Z","updated_at":"2026-11-02T14:32:23.189113Z"}],"euvd":[{"id":"EUVD-2019-7407","description":"Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled, use an RNG with insufficient entropy for blinding, which might allow an attacker to recover a private key via side-channel attacks if a victim signs the same message many times. (For Mbed TLS, the fix is also available in versions 2.7.12 and 2.16.3.)","status":"published","published":"2019-09-26T00:00:00Z","modified":"2024-08-05T01:24:48Z","updated_at":"2026-11-03T02:40:31.903592Z"}],"ghsa":[{"id":"GHSA-jg4p-c829-4q39","title":"Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled,...","description":"Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled, use an RNG with insufficient entropy for blinding, which might allow an attacker to recover a private key via side-channel attacks if a victim signs the same message many times. (For Mbed TLS, the fix is also available in versions 2.7.12 and 2.16.3.)","status":"published","published":"2022-05-24T16:56:57Z","modified":"2026-06-05T21:32:50Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T15:08:36.196175Z"}],"nvd":[{"id":"CVE-2019-16910","description":"Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled, use an RNG with insufficient entropy for blinding, which might allow an attacker to recover a private key via side-channel attacks if a victim signs the same message many times. (For Mbed TLS, the fix is also available in versions 2.7.12 and 2.16.3.)","status":"published","published":"2019-09-26T13:15:10.79Z","modified":"2026-06-17T02:22:56.957Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":2.6,"vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"updated_at":"2026-11-02T14:05:30.039477Z"}],"osv":[{"id":"ALPINE-CVE-2019-16910","description":"Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled, use an RNG with insufficient entropy for blinding, which might allow an attacker to recover a private key via side-channel attacks if a victim signs the same message many times. (For Mbed TLS, the fix is also available in versions 2.7.12 and 2.16.3.)","status":"published","published":"2019-09-26T13:15:10.79Z","modified":"2026-11-03T06:31:52.739067832Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T07:18:15.355745Z"},{"id":"CVE-2019-16910","description":"Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled, use an RNG with insufficient entropy for blinding, which might allow an attacker to recover a private key via side-channel attacks if a victim signs the same message many times. (For Mbed TLS, the fix is also available in versions 2.7.12 and 2.16.3.)","status":"published","published":"2019-09-26T13:15:10.79Z","modified":"2026-10-24T10:47:42.312220878Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:11.673963Z"},{"id":"DEBIAN-CVE-2019-16910","description":"Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled, use an RNG with insufficient entropy for blinding, which might allow an attacker to recover a private key via side-channel attacks if a victim signs the same message many times. (For Mbed TLS, the fix is also available in versions 2.7.12 and 2.16.3.)","status":"published","published":"2019-09-26T13:15:10.79Z","modified":"2026-09-21T07:02:52.88910116Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:31.867036Z"},{"id":"JLSEC-2025-198","title":"Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled,...","description":"Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled, use an RNG with insufficient entropy for blinding, which might allow an attacker to recover a private key via side-channel attacks if a victim signs the same message many times. (For Mbed TLS, the fix is also available in versions 2.7.12 and 2.16.3.)","status":"published","published":"2025-11-21T15:59:04.054Z","modified":"2026-07-23T22:30:18.495954445Z","cvss":[{"version":"2.0","score":2.6,"vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","level":"low"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:47:17.805107Z"},{"id":"UBUNTU-CVE-2019-16910","description":"Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled, use an RNG with insufficient entropy for blinding, which might allow an attacker to recover a private key via side-channel attacks if a victim signs the same message many times. (For Mbed TLS, the fix is also available in versions 2.7.12 and 2.16.3.)","status":"published","published":"2019-09-26T13:15:00Z","modified":"2026-04-22T12:12:39.846015Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:20.325378Z"},{"id":"DLA-3249-1","title":"mbedtls - security update","status":"published","published":"2022-12-26T00:00:00Z","modified":"2026-03-09T01:22:32.743764Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"MGASA-2020-0053","title":"Updated mbedtls packages fix security vulnerabilities","description":"This update from mbedTLS 2.16.2 to mbedTLS 2.16.4 fixes several security\nvulnerabilities, among which:\n\nThe deterministic ECDSA calculation reused the scheme's HMAC-DRBG to\nimplement blinding. Because of this for the same key and message the\nsame blinding value was generated. This reduced the effectiveness of the\ncountermeasure and leaked information about the private key through side\nchannels (CVE-2019-16910).\n\nFix side channel vulnerability in ECDSA. Our bignum implementation is not\nconstant time/constant trace, so side channel attacks can retrieve the blinded\nvalue, factor it (as it is smaller than RSA keys and not guaranteed to have\nonly large prime factors), and then, by brute force, recover the key\n(CVE-2019-18222).\n\nSee release notes for details.\n","status":"published","published":"2020-01-28T07:52:40Z","modified":"2026-04-16T04:44:30.311134355Z","updated_at":"2026-11-02T15:49:41.151324Z"}]}}