CVE-2025-54764

Опубликовано: 20 окт. 2025

Источник: nvd

CVSS3: 6.2

EPSS Низкий

Описание

Mbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and direct calls to mbedtls_mpi_mod_inv or mbedtls_mpi_gcd.

Конфигурация 1

cpe:2.3:a:arm:mbed_tls:*:*:*:*:*:*:*:*

Версия до 3.6.5 (исключая)

EPSS

Процентиль: 11%

0.00206

Низкий

6.2 Medium

CVSS3

CWE-208

CVE-2025-54764

CVSS3: 6.2

ubuntu

11 месяцев назад

Mbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and direct calls to mbedtls_mpi_mod_inv or mbedtls_mpi_gcd.

CVE-2025-54764

CVSS3: 6.2

debian

11 месяцев назад

Mbed TLS before 3.6.5 allows a local timing attack against certain RSA ...

GHSA-6237-9hpw-gcm6

CVSS3: 6.2

github

11 месяцев назад

Mbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and direct calls to mbedtls_mpi_mod_inv or mbedtls_mpi_gcd.

openSUSE-SU-2026:21144-1

suse-cvrf

2 месяца назад

Security update for mbedtls

EPSS

Процентиль: 11%

0.00206

Низкий

6.2 Medium

CVSS3

CWE-208