1307 matches found
TencentOS Server 4: mbedtls (TSSA-2025:0533)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0533 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
[SECURITY] Fedora 41 Update: mbedtls-2.28.10-2.fc41
Mbed TLS is a light-weight open source cryptographic and SSL/TLS library written in C. Mbed TLS makes it easy for developers to include cryptographic and SSL/TLS capabilities in their embedded applications with as little hassle as possible...
Linux Distros Unpatched Vulnerability : CVE-2025-59438
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mbed TLS through 3.6.4 has an Observable Timing Discrepancy. CVE-2025-59438 Note that Nessus relies on the presence of the package as reported by the vendor...
PT-2025-45978
Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or hardware errors, uses uninitialized stack memory to compose the TLS Finished message, potentially leading to authentication bypasses such as replays...
SUSE CVE-2025-59438
Mbed TLS through 3.6.4 has an Observable Timing Discrepancy...
SUSE CVE-2025-54764
Mbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and direct calls to mbedtlsmpimodinv or mbedtlsmpigcd...
EUVD-2025-35171
Mbed TLS through 3.6.4 has an Observable Timing Discrepancy...
ALPINE-CVE-2025-59438
Mbed TLS through 3.6.4 has an Observable Timing Discrepancy...
CVE-2025-59438
Mbed TLS through 3.6.4 has an Observable Timing Discrepancy...
UBUNTU-CVE-2025-59438
Mbed TLS through 3.6.4 has an Observable Timing Discrepancy...
Mbed TLS 安全漏洞
Mbed TLS is an open source, portable, easy to use, readable and flexible SSL library from Mbed TLS Open Source. A security vulnerability exists in Mbed TLS 3.6.4 and earlier versions that stems from the presence of an observable timing difference...
CVE-2025-59438: Observable Timing Discrepancy
Mbed TLS through 3.6.4 has an Observable Timing Discrepancy...
CVE-2025-59438
Mbed TLS through 3.6.4 has an Observable Timing Discrepancy...
CVE-2025-59438
Mbed TLS through 3.6.4 has an Observable Timing Discrepancy...
CVE-2025-59438
The mbedtls library (through version 3.6.4 ) contains an observable timing discrepancy that can lead to a padding oracle attack . The vulnerability stems from the timing of cipher error reporting , which can leak information about secrets during cryptographic operations. This issue specifically a...
PT-2025-42888
Name of the Vulnerable Software and Affected Versions Mbed TLS versions through 3.6.4 Description Mbed TLS contains an Observable Timing Discrepancy. This issue may allow for timing attacks. Recommendations Update to a version of Mbed TLS newer than 3.6.4...
CVE-2025-59438
Mbed TLS through 3.6.4 has an Observable Timing Discrepancy...
DEBIAN-CVE-2025-54764
Mbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and direct calls to mbedtlsmpimodinv or mbedtlsmpigcd...