An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). The calculations performed by mbedtls_mpi_exp_mod are not limited; thus, supplying overly large parameters could lead to denial of service when generating Diffie-Hellman key pairs.

...

[SECURITY] [DLA 4274-2] mbedtls security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4274-2 [email protected] https://www.debian.org/lts/security/ Andrej Shadura August 30, 2025 https://wiki.debian.org/LTS -...

DLA-4274-2 mbedtls - security update

Bulletin has no description...

Debian: Security Advisory (DLA-4274-2)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 4274-1] mbedtls security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4274-1 [email protected] https://www.debian.org/lts/security/ Andrej Shadura August 18, 2025 https://wiki.debian.org/LTS -...

DLA-4274-1 mbedtls - security update

Bulletin has no description...

Debian dla-4274 : libmbedcrypto3 - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4274 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4274-2 [email protected] https://www.debian.org/lts/security/...

Linux Distros Unpatched Vulnerability : CVE-2025-48965

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mbed TLS before 3.6.4 has a NULL pointer dereference because mbedtlsasn1storenameddata can trigger conflicting data with val.p of NULL but val.len greater than...

Linux Distros Unpatched Vulnerability : CVE-2025-49601

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In MbedTLS 3.3.0 before 3.6.4, mbedtlslmsimportpublickey does not check that the input buffer is at least 4 bytes before reading a 32-bit field, allowing a...

The vulnerability of the mbedtls_x509_string_to_names function in Mbed TLS software allows a attacker to execute arbitrary code.

The vulnerability of the mbedtlsx509stringtonames function in Mbed TLS is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the mbedtls_aesni_has_support() function in the Mbed TLS software allows a attacker to compromise the integrity and confidentiality of the protected information.

The vulnerability of the mbedtlsaesnihassupport function in Mbed TLS is related to compiler optimization. Exploiting this vulnerability could allow an attacker to compromise the integrity and confidentiality of the protected information...

The vulnerability of the mbedtls_lms_import_public_key() function in Mbed TLS software allows a attacker to cause a service failure or disclose protected information.

The vulnerability of the mbedtlslmsimportpublickey function in Mbed TLS involves reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure or expose sensitive information...

Linux Distros Unpatched Vulnerability : CVE-2025-49600

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In MbedTLS 3.3.0 before 3.6.4, mbedtlslmsverify may accept invalid signatures if hash computation fails and internal errors go unchecked, enabling LMS...

Exploit for Use After Free in Arm Mbed_Tls

CVE-2025-47917 Exploit Use-After-Free in mbedTLS Author...

Use After Free

Overview Affected versions of this package are vulnerable to Use After Free in the mbedtlsx509stringtonames function. An attacker can potentially achieve code execution, information disclosure, or cause a denial of service by triggering use of memory after it has been freed, such as by manipulati...

Covert Timing Channel

Overview Affected versions of this package are vulnerable to Covert Timing Channel in block cipher padding removal. An attacker can recover plaintext data by exploiting timing discrepancies during decryption when PKCS7 padding mode is used. Remediation Upgrade mbedtls to version 3.6.4 or higher...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference via the mbedtlsasn1storenameddata function. An attacker can cause a crash and denial of service by providing input that results in a NULL pointer with a non-zero length value. Note: This only affects application...

Fedora: Security Advisory (FEDORA-2025-d3585d3323)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-49601

A flaw was found in mbedtls. The mbedtlslmsimportpublickey function fails to validate input buffer size before reading a 32-bit field, potentially leading to an out-of-bounds read when processing truncated input. This flaw allows a network-based attacker to trigger this condition by providing a...

CVE-2025-49600

A flaw was found in mbedtls. The mbedtlslmsverify function may accept forged Leighton-Micali signatures when hash computation fails and internal error conditions are not properly checked. This flaw allows an attacker with physical access to create invalid signatures. This issue occurs because...