Описание
Mbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and direct calls to mbedtls_mpi_mod_inv or mbedtls_mpi_gcd.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| mbedtls | fixed | 3.6.5-0.1 | package | |
| mbedtls | fixed | 3.6.5-0.1~deb13u1 | trixie | package |
| mbedtls | end-of-life | bookworm | package |
Примечания
https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2025-10-ssbleed-mstep/
EPSS
Процентиль: 11%
0.00206
Низкий
Связанные уязвимости
CVSS3: 6.2
ubuntu
11 месяцев назад
Mbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and direct calls to mbedtls_mpi_mod_inv or mbedtls_mpi_gcd.
CVSS3: 6.2
nvd
11 месяцев назад
Mbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and direct calls to mbedtls_mpi_mod_inv or mbedtls_mpi_gcd.
CVSS3: 6.2
github
11 месяцев назад
Mbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and direct calls to mbedtls_mpi_mod_inv or mbedtls_mpi_gcd.
EPSS
Процентиль: 11%
0.00206
Низкий