CVE-2025-54764

Опубликовано: 20 окт. 2025

Источник: ubuntu

Приоритет: medium

EPSS Низкий

CVSS3: 6.2

Описание

Mbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and direct calls to mbedtls_mpi_mod_inv or mbedtls_mpi_gcd.

Релиз	Статус	Примечание
devel	not-affected	3.6.5-0.1ubuntu2
esm-apps-legacy/xenial	ignored	changes too intrusive
esm-apps/bionic	ignored	changes too intrusive
esm-apps/focal	ignored	changes too intrusive
esm-apps/jammy	ignored	changes too intrusive
esm-apps/noble	ignored	changes too intrusive
esm-apps/resolute	not-affected	3.6.5-0.1ubuntu2
esm-apps/xenial	ignored	end of ESM support, was ignored [changes too intrusive]
jammy	ignored	changes too intrusive
noble	ignored	changes too intrusive

Показывать по

EPSS

Процентиль: 11%

0.00206

Низкий

6.2 Medium

CVSS3

CVE-2025-54764

CVSS3: 6.2

nvd

11 месяцев назад

Mbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and direct calls to mbedtls_mpi_mod_inv or mbedtls_mpi_gcd.

CVE-2025-54764

CVSS3: 6.2

debian

11 месяцев назад

Mbed TLS before 3.6.5 allows a local timing attack against certain RSA ...

GHSA-6237-9hpw-gcm6

CVSS3: 6.2

github

11 месяцев назад

Mbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and direct calls to mbedtls_mpi_mod_inv or mbedtls_mpi_gcd.

openSUSE-SU-2026:21144-1

suse-cvrf

2 месяца назад

Security update for mbedtls

EPSS

Процентиль: 11%

0.00206

Низкий

6.2 Medium

CVSS3