{"id":"CVE-2025-27810","aliases":["ALPINE-CVE-2025-27810","DEBIAN-CVE-2025-27810","EUVD-2025-14831","GHSA-vvqm-mmw4-qwg5","JLSEC-2025-187","ROOT-OS-DEBIAN-12-CVE-2025-27810","UBUNTU-CVE-2025-27810","USN-8123-1","openSUSE-SU-2025:14928-1","openSUSE-SU-2026:21144-1","openSUSE-SU-2026:21145-1"],"status":"published","title":"Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or...","description":"Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or hardware errors, uses uninitialized stack memory to compose the TLS Finished message, potentially leading to authentication bypasses such as replays.","severity":{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00297,"percentile":0.22621,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-908"],"published":"2025-03-25T00:00:00Z","modified":"2026-11-03T06:32:51Z","fixes":[{"ecosystem":"Alpine:v3.18","package":"mbedtls","fixed_in":["2.28.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"mbedtls","fixed_in":["2.28.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"mbedtls","fixed_in":["3.6.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"mbedtls","fixed_in":["3.6.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"mbedtls","fixed_in":["3.6.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"mbedtls","fixed_in":["3.6.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"mbedtls","fixed_in":["3.6.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"mbedtls2","fixed_in":["2.28.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"mbedtls2","fixed_in":["2.28.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"mbedtls2","fixed_in":["2.28.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"mbedtls2","fixed_in":["2.28.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"mbedtls3","fixed_in":["3.6.3-r0"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"mbedtls","fixed_in":["3.6.3-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"mbedtls","fixed_in":["3.6.3-1"],"sources":["osv"]},{"ecosystem":"Julia","package":"MbedTLS_jll","fixed_in":["2.28.10+0"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"mbedtls","fixed_in":["2.28.3-1.root.io.14","2.28.3-1.root.io.15","2.28.3-1.root.io.16","2.28.3-1.root.io.12","2.28.3-1.root.io.13","2.28.3-1.aikido.17"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"rootio-mbedtls","fixed_in":["2.28.3-1.root.io.14","2.28.3-1.root.io.15","2.28.3-1.root.io.16","2.28.3-1.root.io.12","2.28.3-1.root.io.13","2.28.3-1.aikido.17"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"mbedtls","fixed_in":["2.8.0-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"mbedtls","fixed_in":["2.16.4-1ubuntu2+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"mbedtls","fixed_in":["2.28.0-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:24.04:LTS","package":"mbedtls","fixed_in":["2.28.8-1ubuntu0.1~esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.18","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"mbedtls2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"mbedtls2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"mbedtls2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"mbedtls2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"mbedtls3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.3-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.28.3-1","2.28.4-1","2.28.5-1","2.28.6-1","2.28.7-1","2.28.7-1.1","2.28.7-1.1~exp1","2.28.8-1","3.6.0-1","3.6.0-2","3.6.0-3","3.6.2-1","3.6.2-2","3.6.2-3","3.6.3-1","3.6.4-1","3.6.4-2","3.6.5-0.1","3.6.5-0.1~deb13u1","3.6.6-0.1","3.6.7-2","3.6.7-3"]},{"source":"osv","ecosystem":"Debian:13","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.3-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.3-1"}]}]},{"source":"osv","ecosystem":"Julia","package":"MbedTLS_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.28.10+0"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.3-1.root.io.14"},{"fixed":"2.28.3-1.root.io.15"},{"fixed":"2.28.3-1.root.io.16"},{"fixed":"2.28.3-1.root.io.12"},{"fixed":"2.28.3-1.root.io.13"},{"fixed":"2.28.3-1.aikido.17"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"rootio-mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.3-1.root.io.14"},{"fixed":"2.28.3-1.root.io.15"},{"fixed":"2.28.3-1.root.io.16"},{"fixed":"2.28.3-1.root.io.12"},{"fixed":"2.28.3-1.root.io.13"},{"fixed":"2.28.3-1.aikido.17"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.1.2-1","2.2.0-1","2.2.1-1","2.2.1-2","2.2.1-2ubuntu0.1","2.2.1-2ubuntu0.2","2.2.1-2ubuntu0.3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.0-1ubuntu0.1~esm1"}]}],"versions":["2.5.1-1ubuntu1","2.6.0-1","2.7.0-2","2.8.0-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.4-1ubuntu2+esm1"}]}],"versions":["2.16.2-1","2.16.3-1","2.16.4-1ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.0-1ubuntu0.1~esm1"}]}],"versions":["2.16.9-0.1ubuntu1","2.16.11-0.1ubuntu1","2.16.11-0.3","2.28.0-1","2.28.0-1build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.8-1ubuntu0.1~esm1"}]}],"versions":["2.28.3-1","2.28.6-1ubuntu1","2.28.7-1ubuntu1","2.28.7-1.1ubuntu1","2.28.8-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.6.2-3ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.0-1ubuntu0.1~esm1"}]}],"versions":["2.5.1-1ubuntu1","2.6.0-1","2.7.0-2","2.8.0-1"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.4-1ubuntu2+esm1"}]}],"versions":["2.16.2-1","2.16.3-1","2.16.4-1ubuntu2"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.0-1ubuntu0.1~esm1"}]}],"versions":["2.16.9-0.1ubuntu1","2.16.11-0.1ubuntu1","2.16.11-0.3","2.28.0-1","2.28.0-1build1"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.8-1ubuntu0.1~esm1"}]}],"versions":["2.28.3-1","2.28.6-1ubuntu1","2.28.7-1ubuntu1","2.28.7-1.1ubuntu1","2.28.8-1"],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"mbedtls-2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.10-1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.6-bp160.1.1"}]}],"bundled":15},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"mbedtls-2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.10-bp160.1.1"}]}],"bundled":3}],"products":[{"vendor":"arm","product":"mbed_tls"},{"vendor":"mbed","product":"mbedtls"},{"vendor":"trustedfirmware","product":"mbed_tls"}],"references":[{"url":"https://github.com/Mbed-TLS/mbedtls/releases","tags":["Release Notes","package","web"]},{"url":"https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2025-03-2/","tags":["Vendor Advisory","advisory","web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27810","tags":["advisory"]},{"url":"https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2025-03-2"},{"url":"https://github.com/advisories/GHSA-vvqm-mmw4-qwg5"},{"url":"https://security.alpinelinux.org/vuln/CVE-2025-27810","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/27xxx/CVE-2025-27810.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-27810","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-27810","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-27810","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8123-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-44732","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-23775","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-47917","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-48965","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-52496","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-52497","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NEXH3S4RBK73QBEEJ7JPT75BI5G4JFKE/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2025-27809","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-27810","tags":["web"]},{"url":"","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1231708","tags":["report"]},{"url":"https://bugzilla.suse.com/1240051","tags":["report"]},{"url":"https://bugzilla.suse.com/1240052","tags":["report"]},{"url":"https://bugzilla.suse.com/1245808","tags":["report"]},{"url":"https://bugzilla.suse.com/1245809","tags":["report"]},{"url":"https://bugzilla.suse.com/1245810","tags":["report"]},{"url":"https://bugzilla.suse.com/1245811","tags":["report"]},{"url":"https://bugzilla.suse.com/1246783","tags":["report"]},{"url":"https://bugzilla.suse.com/1246784","tags":["report"]},{"url":"https://bugzilla.suse.com/1246973","tags":["report"]},{"url":"https://bugzilla.suse.com/1252341","tags":["report"]},{"url":"https://bugzilla.suse.com/1252454","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47917","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-48965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-49087","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-49600","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-49601","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-52496","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-52497","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54764","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59438","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25833","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25834","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25835","tags":["web"]},{"url":"https://bugzilla.suse.com/1230310","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45157","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2025-27810","description":"Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or hardware errors, uses uninitialized stack memory to compose the TLS Finished message, potentially leading to authentication bypasses such as replays.","status":"published","published":"2025-03-25T00:00:00Z","modified":"2025-03-25T14:37:14.294Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-908"],"updated_at":"2026-11-02T14:32:42.411662Z"}],"euvd":[{"id":"EUVD-2025-14831","description":"Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or hardware errors, uses uninitialized stack memory to compose the TLS Finished message, potentially leading to authentication bypasses such as replays.","status":"published","published":"2025-03-25T00:00:00Z","modified":"2025-03-25T14:37:14Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T20:52:53.129601Z"}],"ghsa":[{"id":"GHSA-vvqm-mmw4-qwg5","title":"Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or...","description":"Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or hardware errors, uses uninitialized stack memory to compose the TLS Finished message, potentially leading to authentication bypasses such as replays.","status":"published","published":"2025-03-25T06:30:28Z","modified":"2025-03-25T06:30:33Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-908"],"updated_at":"2026-11-02T15:00:25.909155Z"}],"nvd":[{"id":"CVE-2025-27810","description":"Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or hardware errors, uses uninitialized stack memory to compose the TLS Finished message, potentially leading to authentication bypasses such as replays.","status":"published","published":"2025-03-25T06:15:41.18Z","modified":"2026-06-17T09:04:15.71Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-908"],"updated_at":"2026-11-02T14:10:55.858901Z"}],"osv":[{"id":"ALPINE-CVE-2025-27810","description":"Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or hardware errors, uses uninitialized stack memory to compose the TLS Finished message, potentially leading to authentication bypasses such as replays.","status":"published","published":"2025-03-25T06:15:41.18Z","modified":"2026-11-03T06:32:51.202494382Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-03T07:16:46.202932Z"},{"id":"CVE-2025-27810","description":"Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or hardware errors, uses uninitialized stack memory to compose the TLS Finished message, potentially leading to authentication bypasses such as replays.","status":"published","published":"2025-03-25T00:00:00Z","modified":"2026-10-28T02:30:50.18685357Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-908"],"updated_at":"2026-11-02T15:44:47.708311Z"},{"id":"DEBIAN-CVE-2025-27810","description":"Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or hardware errors, uses uninitialized stack memory to compose the TLS Finished message, potentially leading to authentication bypasses such as replays.","status":"published","published":"2025-03-25T06:15:41.18Z","modified":"2026-09-01T20:05:45.340070378Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:45.870237Z"},{"id":"JLSEC-2025-187","title":"Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or hardware...","description":"Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or hardware errors, uses uninitialized stack memory to compose the TLS Finished message, potentially leading to authentication bypasses such as replays.","status":"published","published":"2025-10-23T17:26:52.088Z","modified":"2026-07-23T22:30:17.313435166Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:47:17.805107Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2025-27810","title":"CVE-2025-27810 in mbedtls - Patched by Root","description":"Root has patched CVE-2025-27810 in the mbedtls package for Root:Debian:12. Multiple fixed versions available.","status":"published","published":"2026-08-25T12:15:34Z","modified":"2026-08-26T01:12:55.05491276Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:30.983521Z"},{"id":"UBUNTU-CVE-2025-27810","description":"Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or hardware errors, uses uninitialized stack memory to compose the TLS Finished message, potentially leading to authentication bypasses such as replays.","status":"published","published":"2025-03-25T06:15:00Z","modified":"2026-04-22T15:41:01.536243Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N","level":"medium"},{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T16:55:26.330196Z"},{"id":"openSUSE-SU-2025:14928-1","title":"libmbedcrypto7-2.28.10-1.1 on GA media","description":"These are all security issues fixed in the libmbedcrypto7-2.28.10-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-03-25T00:00:00Z","modified":"2026-02-04T03:48:44.535247Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"openSUSE-SU-2026:21144-1","title":"Security update for mbedtls","description":"This update for mbedtls fixes the following issues:\n\nChanges in mbedtls:\n\n- Update to 3.6.6 (LTS maintenance update from 3.6.1); security fixes\n  accumulated across the 3.6.2-3.6.6 releases:\n  * CVE-2024-49195 (boo#1231708): buffer underrun in pkwrite when\n    writing an opaque key pair\n  * CVE-2025-27809 (boo#1240051): certificate verification accepted\n    arbitrary hostnames\n  * CVE-2025-27810 (boo#1240052): possible authentication bypass on\n    failed memory allocation / hardware errors\n  * CVE-2025-47917 (boo#1246783): misleading memory management in\n    mbedtls_x509_string_to_names()\n  * CVE-2025-48965 (boo#1246784): NULL pointer dereference after\n    mbedtls_asn1_store_named_data()\n  * CVE-2025-49087 (boo#1246973): timing side channel in PKCS#7\n    padding removal\n  * CVE-2025-49600 (boo#1245808): unchecked return values in LMS\n    verification allow signature bypass via fault injection\n  * CVE-2025-49601 (boo#1245809): out-of-bounds read in\n    mbedtls_lms_import_public_key()\n  * CVE-2025-52496 (boo#1245810): race in AES-NI support detection can\n    lead to AES key extraction or GCM forgery\n  * CVE-2025-52497 (boo#1245811): one-byte heap underflow when parsing\n    PEM-encrypted material\n  * CVE-2025-54764 (boo#1252341): timing attacks in RSA operations\n  * CVE-2025-59438 (boo#1252454): padding-oracle attack via timing of\n    cipher error reporting\n  * CVE-2026-25833: PSA RNG state duplicated across fork()\n  * CVE-2026-25834: TLS 1.3 HelloRetryRequest man-in-the-middle\n    session-resumption downgrade\n  * CVE-2026-25835: RNG state duplicated when application/VM state is\n    cloned\n","status":"published","published":"2026-06-22T13:34:13Z","modified":"2026-06-30T18:24:45.186057867Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"openSUSE-SU-2026:21145-1","title":"Security update for mbedtls-2","description":"This update for mbedtls-2 fixes the following issues:\n\nChanges in mbedtls-2:\n\n- Enable SRTP and DTLS protocols needed by some software.\n\n- Update to version 2.28.10:\n  Default behavior changes\n  * In TLS clients, if mbedtls_ssl_set_hostname() has not been called,\n    mbedtls_ssl_handshake() now fails with\n    MBEDTLS_ERR_SSL_CERTIFICATE_VERIFICATION_WITHOUT_HOSTNAME\n    if certificate-based authentication of the server is attempted.\n    This is because authenticating a server without knowing what name\n    to expect is usually insecure. To restore the old behavior, either\n    call mbedtls_ssl_set_hostname() with NULL as the hostname, or\n    enable the new compile-time option\n    MBEDTLS_SSL_CLI_ALLOW_WEAK_CERTIFICATE_VERIFICATION_WITHOUT_HOSTNAME.\n    The content of ssl-\u003ehostname after mbedtls_ssl_set_hostname(ssl, NULL)\n    has changed, see the documentation of the hostname field in the\n    mbedtls_ssl_context struct type for details.\n  Security\n  * Note that TLS clients should generally call mbedtls_ssl_set_hostname()\n    if they use certificate authentication (i.e. not pre-shared keys).\n    Otherwise, in many scenarios, the server could be impersonated.\n    The library will now prevent the handshake and return\n    MBEDTLS_ERR_SSL_CERTIFICATE_VERIFICATION_WITHOUT_HOSTNAME\n    if mbedtls_ssl_set_hostname() has not been called.\n    CVE-2025-27809 (boo#1240051)\n  * Zeroize temporary heap buffers used in PSA operations.\n  * Fix a vulnerability in the TLS 1.2 handshake. If memory allocation failed\n    or there was a cryptographic hardware failure when calculating the\n    Finished message, it could be calculated incorrectly. This would break\n    the security guarantees of the TLS handshake.\n    CVE-2025-27810 (boo#1240052)\n  Bugfix\n  * Use 'mbedtls_net_close' instead of 'close' in 'mbedtls_net_bind'\n    and 'mbedtls_net_connect' to prevent possible double close fd\n    problems. Fixes gh#Mbed-TLS/mbedtls#9711.\n  * Fix compilation on MS-DOS DJGPP. Fixes gh#Mbed-TLS/mbedtls#9813.\n  * Fix missing constraints on the AES-NI inline assembly which is used on\n    GCC-like compilers when building AES for generic x86_64 targets. This\n    may have resulted in incorrect code with some compilers, depending on\n    optimizations. Fixes gh#Mbed-TLS/mbedtls#9819.\n  * Fix issue where psa_key_derivation_input_integer() is not detecting\n    bad state after an operation has been aborted.\n  * Fix definition of MBEDTLS_PRINTF_SIZET to prevent runtime crashes that\n    occurred whenever SSL debugging was enabled on a copy of Mbed TLS built\n    with Visual Studio 2013 or MinGW.\n    Fixes gh#Mbed-TLS/mbedtls#10017.\n  * Remove Everest Visual Studio 2010 compatibility headers, which could\n    shadow standard CRT headers inttypes.h and stdbool.h with incomplete\n    implementatios if placed on the include path, eg. when building Mbed TLS\n    with the .sln file shipped with the project.\n","status":"published","published":"2026-06-22T13:08:31Z","modified":"2026-06-30T18:24:45.317071532Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"USN-8123-1","title":"mbedtls vulnerabilities","description":"It was discovered that Mbed TLS incorrectly handled memory allocation\nfailures. A remote attacker could possibly use this issue to crash\nthe program. This issue only affected Ubuntu 18.04 LTS and Ubuntu\n20.04 LTS. (CVE-2021-44732)\n\nJonathan Winzig discovered that Mbed TLS incorrectly handled crafted\ninputs. A remote attacker could possibly use this issue to crash the\nprogram, resulting in a denial of service. This issue only affected\nUbuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS. (CVE-2024-23775)\n\nIt was discovered that Mbed TLS incorrectly handled the TLS\nhandshake. A remote attacker could possibly use this issue to\nbreak the security guarantees of the TLS handshake.\n(CVE-2025-27810)\n\nLinh Le and Ngan Nguyen discovered that Mbed TLS incorrectly\ndocumented the behavior of a function. Application code relying\non the documented behavior might be affected. A remote attacker\ncould possibly use this issue to execute arbitrary code.\n(CVE-2025-47917)\n\nLinh Le and Ngan Nguyen discovered that Mbed TLS incorrectly handled\ncrafted input. A remote attacker could possibly use this issue to\ncrash the program, resulting in a denial of service. (CVE-2025-48965)\n\nIt was discovered that Mbed TLS incorrectly handled a race condition.\nAn attacker could possibly use this issue to extract AES keys.\n(CVE-2025-52496)\n\nLinh Le and Ngan Nguyen discovered that Mbed TLS incorrectly handled\ncertain invalid input. A remote attacker could possibly use this\nissue to crash the program, resulting in a denial of service.\n(CVE-2025-52497)","status":"published","published":"2026-03-25T16:22:11Z","modified":"2026-04-27T18:44:30.29713Z","updated_at":"2026-11-02T16:58:22.951676Z"}]}}