A Lucky 13 timing side channel in mbedtls_ssl_decrypt_buf in library/ssl_msg.c in Trusted Firmware Mbed TLS through 2.23.0 allows an attacker to recover secret key information. This affects CBC mode because of a computed time difference based on a padding length.
| Product | Vendor | Version |
|---|---|---|
| n/a | n/a | 10 Version 1803 for x64-based Systems |