CVE-2022-46392: Medium severity Arm mbed TLS vulnerability
An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. An adversary with access to precise enough information about memory accesses (typically an untrusted operating system attacking a secure enclave) can recover an RSA private key after observing the victim performing a single private-key operation if the window size (MBEDTLSMPIWINDOWSIZE) used for the exponentiation is 3 or smaller.
Other sources
An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. An adversary with access to precise enough information about memory accesses (typically, an untrusted operating system attacking a secure enclave) can recover an RSA private key after observing the victim performing a single private-key operation, if the window size (MBEDTLSMPIWINDOWSIZE) used for the exponentiation is 3 or smaller.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-46392?
The severity of CVE-2022-46392 is medium with a CVSS score of 5.3.
What software versions are affected by CVE-2022-46392?
CVE-2022-46392 affects ARM mbed TLS versions up to 2.28.2 and versions between 3.0.0 and 3.3.0, as well as Fedora versions 36 and 37.
How can an adversary exploit CVE-2022-46392?
An adversary with access to precise enough information about memory accesses, such as an untrusted operating system attacking a secure enclave, can exploit CVE-2022-46392 to recover an RSA private key after observing a single operation.
How do I fix CVE-2022-46392?
To fix CVE-2022-46392, users should update to Mbed TLS version 2.28.2 or higher for versions up to 2.x, and version 3.3.0 or higher for versions between 3.0.0 and 3.x.
Where can I find more information about CVE-2022-46392?
More information about CVE-2022-46392 can be found on the following references: [GitHub release page for Mbed TLS 2.28.2](https://github.com/Mbed-TLS/mbedtls/releases/tag/v2.28.2), [GitHub release page for Mbed TLS 3.3.0](https://github.com/Mbed-TLS/mbedtls/releases/tag/v3.3.0), [Fedora package announce mailing list](https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4BR7ZCVKLPGCOEEALUHZMFHXQHR6S4QL/)