Linux Distros Unpatched Vulnerability : CVE-2025-54764

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and direct calls to mbedtlsmpimodinv or mbedtlsmpigcd. CVE-2025-54764 Note th...

Timing Attack

Overview Affected versions of this package are vulnerable to Timing Attack via the mbedtlsmpimodinv or mbedtlsmpigcd functions. An attacker can recover sensitive information from RSA operations by performing a local timing analysis. Note: Applications that do not use RSA private keys and do not...

PT-2025-42819

Name of the Vulnerable Software and Affected Versions Mbed TLS versions prior to 3.6.5 Description The software contains a flaw that could allow a local attacker to conduct a timing attack against specific RSA operations. Additionally, direct calls to the mbedtls mpi mod inv and mbedtls mpi gcd...