{"id":"CVE-2021-24119","aliases":["DEBIAN-CVE-2021-24119","DLA-2826-1","DLA-3249-1","DLA-4236-1","EUVD-2021-11034","GHSA-7wc7-36pp-g93m","JLSEC-2025-203","UBUNTU-CVE-2021-24119","openSUSE-SU-2021:1344-1","openSUSE-SU-2021:1355-1","openSUSE-SU-2021:1389-1","openSUSE-SU-2024:11552-1","openSUSE-SU-2026:11119-1"],"status":"published","title":"In Trusted Firmware Mbed TLS 2.24.0, a side-channel vulnerability in base64 PEM file decoding...","description":"In Trusted Firmware Mbed TLS 2.24.0, a side-channel vulnerability in base64 PEM file decoding allows system-level (administrator) attackers to obtain information about secret RSA keys via a controlled-channel and side-channel attack on software running in isolated environments that can be single stepped, especially Intel SGX.","severity":{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.01484,"percentile":0.7435,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-203"],"published":"2021-07-14T00:00:00Z","modified":"2026-11-11T09:36:57Z","fixes":[{"ecosystem":"Debian:12","package":"mbedtls","fixed_in":["2.16.11-0.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"mbedtls","fixed_in":["2.16.11-0.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"mbedtls","fixed_in":["2.16.11-0.1"],"sources":["osv"]},{"ecosystem":"Julia","package":"MbedTLS_jll","fixed_in":["2.26.0+0"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"mbedtls","fixed_in":["2.16.9-lp152.2.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 15 SP2","package":"mbedtls","fixed_in":["2.16.9-bp152.2.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 15 SP3","package":"mbedtls","fixed_in":["2.16.9-bp153.2.5.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"mbedtls","fixed_in":["2.16.9-bp153.2.5.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"mbedtls-2","fixed_in":["2.27.0-2.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.11-0.1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.11-0.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.11-0.1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-1+deb9u4"}]}],"versions":["2.4.2-1","2.4.2-1+deb9u1","2.4.2-1+deb9u1~bpo8+1","2.4.2-1+deb9u2","2.4.2-1+deb9u3"],"bundled":6},{"source":"osv","ecosystem":"Debian:10","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.9-0~deb10u1"}]}],"versions":["2.16.0-1","2.16.2-1","2.16.3-1","2.16.4-1","2.16.5-1"],"bundled":18},{"source":"osv","ecosystem":"Debian:11","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.9-0.1+deb11u1"}]}],"versions":["2.16.9-0.1"],"bundled":5},{"source":"osv","ecosystem":"Julia","package":"MbedTLS_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.26.0+0"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.1.2-1","2.2.0-1","2.2.1-1","2.2.1-2","2.2.1-2ubuntu0.1","2.2.1-2ubuntu0.2","2.2.1-2ubuntu0.3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.5.1-1ubuntu1","2.6.0-1","2.7.0-2","2.8.0-1","2.8.0-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.16.2-1","2.16.3-1","2.16.4-1ubuntu2","2.16.4-1ubuntu2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.16.9-0.1ubuntu1","2.16.11-0.1ubuntu1","2.16.11-0.3","2.28.0-1","2.28.0-1build1","2.28.0-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.6.2-3ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.6.5-0.1ubuntu2","3.6.6-0.1ubuntu1","3.6.7-3ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.6.2-3ubuntu1","3.6.5-0.1ubuntu1","3.6.5-0.1ubuntu2"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.9-lp152.2.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP2","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.9-bp152.2.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP3","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.9-bp153.2.5.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.9-bp153.2.5.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"mbedtls-2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-2.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"mbedtls-3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.6-1.1"}]}],"bundled":14}],"products":[{"vendor":"arm","product":"mbed_tls"},{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"}],"references":[{"url":"https://github.com/ARMmbed/mbedtls/releases","tags":["x_transferred","Release Notes","Third Party Advisory","advisory","web","report"]},{"url":"https://github.com/UzL-ITS/util-lookup/blob/main/cve-vulnerability-publication.md","tags":["x_transferred","Release Notes","Third Party Advisory","advisory","web","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DRRVY7DMTX3ECFNZKDYTSFEG5AI2HBC6/","tags":["vendor-advisory","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EYJW7HAW3TDV2YMDFYXP3HD6WRQRTLJW/","tags":["vendor-advisory","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/11/msg00021.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/12/msg00036.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/06/msg00034.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-24119"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DRRVY7DMTX3ECFNZKDYTSFEG5AI2HBC6"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EYJW7HAW3TDV2YMDFYXP3HD6WRQRTLJW"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DRRVY7DMTX3ECFNZKDYTSFEG5AI2HBC6"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EYJW7HAW3TDV2YMDFYXP3HD6WRQRTLJW"},{"url":"https://github.com/advisories/GHSA-7wc7-36pp-g93m"},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-24119","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-24119","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-24119","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TUAORD5DVNESTJH3EH3OO36VCU4DKEPQ/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1189589","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-24119","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/C77WUNAX6B5WKSXJWBNNJZZKI6OORZNP/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/36R5MNRZX7IWOTML46RHIYNDAV7YDYQN/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8627","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8628","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1182","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5291","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7575","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14032","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2784","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0487","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0488","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19608","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-45450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-35409","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-46393","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2021-24119","description":"In Trusted Firmware Mbed TLS 2.24.0, a side-channel vulnerability in base64 PEM file decoding allows system-level (administrator) attackers to obtain information about secret RSA keys via a controlled-channel and side-channel attack on software running in isolated environments that can be single stepped, especially Intel SGX.","status":"published","published":"2021-07-14T00:00:00Z","modified":"2025-11-03T19:25:39.621Z","updated_at":"2026-11-02T14:33:05.331617Z"}],"euvd":[{"id":"EUVD-2021-11034","description":"In Trusted Firmware Mbed TLS 2.24.0, a side-channel vulnerability in base64 PEM file decoding allows system-level (administrator) attackers to obtain information about secret RSA keys via a controlled-channel and side-channel attack on software running in isolated environments that can be single stepped, especially Intel SGX.","status":"published","published":"2021-07-14T00:00:00Z","modified":"2025-11-03T19:25:39Z","updated_at":"2026-11-02T19:49:34.152725Z"}],"ghsa":[{"id":"GHSA-7wc7-36pp-g93m","title":"In Trusted Firmware Mbed TLS 2.24.0, a side-channel vulnerability in base64 PEM file decoding...","description":"In Trusted Firmware Mbed TLS 2.24.0, a side-channel vulnerability in base64 PEM file decoding allows system-level (administrator) attackers to obtain information about secret RSA keys via a controlled-channel and side-channel attack on software running in isolated environments that can be single stepped, especially Intel SGX.","status":"published","published":"2022-05-24T19:08:02Z","modified":"2025-11-03T21:31:36Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-203"],"updated_at":"2026-11-02T15:04:18.722049Z"}],"nvd":[{"id":"CVE-2021-24119","description":"In Trusted Firmware Mbed TLS 2.24.0, a side-channel vulnerability in base64 PEM file decoding allows system-level (administrator) attackers to obtain information about secret RSA keys via a controlled-channel and side-channel attack on software running in isolated environments that can be single stepped, especially Intel SGX.","status":"published","published":"2021-07-14T13:15:08.1Z","modified":"2026-06-17T03:39:25.587Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-203"],"updated_at":"2026-11-02T14:06:55.747384Z"}],"osv":[{"id":"CVE-2021-24119","description":"In Trusted Firmware Mbed TLS 2.24.0, a side-channel vulnerability in base64 PEM file decoding allows system-level (administrator) attackers to obtain information about secret RSA keys via a controlled-channel and side-channel attack on software running in isolated environments that can be single stepped, especially Intel SGX.","status":"published","published":"2021-07-14T13:15:08.1Z","modified":"2026-10-20T10:53:38.574969109Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:18.778776Z"},{"id":"DEBIAN-CVE-2021-24119","description":"In Trusted Firmware Mbed TLS 2.24.0, a side-channel vulnerability in base64 PEM file decoding allows system-level (administrator) attackers to obtain information about secret RSA keys via a controlled-channel and side-channel attack on software running in isolated environments that can be single stepped, especially Intel SGX.","status":"published","published":"2021-07-14T13:15:08.1Z","modified":"2026-10-23T18:02:52.052814595Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:34.637046Z"},{"id":"JLSEC-2025-203","title":"In Trusted Firmware Mbed TLS 2.24.0, a side-channel vulnerability in base64 PEM file decoding allows...","description":"In Trusted Firmware Mbed TLS 2.24.0, a side-channel vulnerability in base64 PEM file decoding allows system-level (administrator) attackers to obtain information about secret RSA keys via a controlled-channel and side-channel attack on software running in isolated environments that can be single stepped, especially Intel SGX.","status":"published","published":"2025-11-21T15:59:04.054Z","modified":"2026-07-18T00:00:55.997931153Z","cvss":[{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium"},{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:47:17.805107Z"},{"id":"UBUNTU-CVE-2021-24119","description":"In Trusted Firmware Mbed TLS 2.24.0, a side-channel vulnerability in base64 PEM file decoding allows system-level (administrator) attackers to obtain information about secret RSA keys via a controlled-channel and side-channel attack on software running in isolated environments that can be single stepped, especially Intel SGX.","status":"published","published":"2021-07-14T13:15:00Z","modified":"2026-11-11T09:36:57.204550671Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-11T09:58:35.519375Z"},{"id":"DLA-2826-1","title":"mbedtls - security update","status":"published","published":"2021-11-23T00:00:00Z","modified":"2026-03-09T01:19:10.52461Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DLA-3249-1","title":"mbedtls - security update","status":"published","published":"2022-12-26T00:00:00Z","modified":"2026-03-09T01:22:32.743764Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"DLA-4236-1","title":"mbedtls - security update","status":"published","published":"2025-06-30T00:00:00Z","modified":"2026-03-09T02:10:22.793566Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"openSUSE-SU-2021:1344-1","title":"Security update for mbedtls","description":"This update for mbedtls fixes the following issues:\n\n* CVE-2021-24119: Fixed side-channel vulnerability in base64 PEM [boo#1189589]\n\n  Guard against strong local side channel attack against base64 tables by making access aceess to them use constant flow code.\n","status":"published","published":"2021-10-11T16:06:20Z","modified":"2026-02-04T03:06:31.926234Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2021:1355-1","title":"Security update for mbedtls","description":"This update for mbedtls fixes the following issues:\n\n* CVE-2021-24119: Fixed side-channel vulnerability in base64 PEM [boo#1189589]\n\n  Guard against strong local side channel attack against base64 tables by making access aceess to them use constant flow code.\n\nThis update was imported from the openSUSE:Leap:15.2:Update update project.","status":"published","published":"2021-10-15T04:06:21Z","modified":"2026-02-04T03:41:51.897784Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2021:1389-1","title":"Security update for mbedtls","description":"This update for mbedtls fixes the following issues:\n\n* CVE-2021-24119: Fixed side-channel vulnerability in base64 PEM [boo#1189589]\n\n  Guard against strong local side channel attack against base64 tables by making access aceess to them use constant flow code.\n","status":"published","published":"2021-10-20T18:07:41Z","modified":"2026-02-04T02:22:11.420347Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2024:11552-1","title":"libmbedcrypto7-2.27.0-2.1 on GA media","description":"These are all security issues fixed in the libmbedcrypto7-2.27.0-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:21:50.73657Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"openSUSE-SU-2026:11119-1","title":"libeverest-3.6.6-1.1 on GA media","description":"These are all security issues fixed in the libeverest-3.6.6-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-06-25T00:00:00Z","modified":"2026-06-26T08:15:07.625184367Z","updated_at":"2026-11-02T16:58:38.95195Z"}]}}