CVE-2017-1000412 - Linaro's open source TEE solution called OP-TEE, version 2.4.0 (and older) is vulnerable to the bellcore attack in the LibTomCrypt code resulting in compromised private RSA key

Back Back to CVE browser

HIGH

Linaro's open source TEE solution called OP-TEE, version 2.4.0 (and older) is vulnerable to the bellcore attack in the LibTomCrypt code resulting in compromised private RSA key

Published Jan 2, 2018

7.5

HIGH

CVSS 3.0

EPSS 1.93%

Description

Linaro's open source TEE solution called OP-TEE, version 2.4.0 (and older) is vulnerable to the bellcore attack in the LibTomCrypt code resulting in compromised private RSA key.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (3)

https://github.com/OP-TEE/optee_os/blob/2.5.0/CHANGELOG.md
x_refsource_CONFIRMThird Party Advisory
https://github.com/OP-TEE/optee_os/pull/1610
x_refsource_CONFIRMThird Party Advisory
https://www.op-tee.org/security-advisories/
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://github.com/OP-TEE/optee_os/blob/2.5.0/CHANGELOG.md		x_refsource_CONFIRMThird Party Advisory
https://github.com/OP-TEE/optee_os/pull/1610		x_refsource_CONFIRMThird Party Advisory
https://www.op-tee.org/security-advisories/		x_refsource_CONFIRMVendor Advisory